./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:19:38,251 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:19:38,366 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:19:38,370 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:19:38,371 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:19:38,413 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:19:38,414 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:19:38,414 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:19:38,416 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:19:38,418 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:19:38,419 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:19:38,420 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:19:38,421 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:19:38,425 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:19:38,426 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:19:38,426 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:19:38,427 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:19:38,427 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:19:38,428 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:19:38,428 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:19:38,428 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:19:38,429 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:19:38,430 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:19:38,430 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:19:38,431 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:19:38,432 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:19:38,432 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:19:38,432 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:19:38,433 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:19:38,433 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:19:38,435 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:19:38,435 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:19:38,435 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:19:38,436 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:19:38,436 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:19:38,436 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:19:38,436 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:19:38,437 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:19:38,437 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:19:38,437 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 [2023-11-06 22:19:38,784 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:19:38,815 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:19:38,818 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:19:38,819 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:19:38,820 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:19:38,821 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2023-11-06 22:19:42,053 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:19:42,308 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:19:42,309 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2023-11-06 22:19:42,325 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/data/197077d08/5a77b292492542f995ef45394215ea73/FLAGabdcc7a66 [2023-11-06 22:19:42,339 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/data/197077d08/5a77b292492542f995ef45394215ea73 [2023-11-06 22:19:42,342 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:19:42,344 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:19:42,345 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:19:42,346 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:19:42,356 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:19:42,357 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:42,358 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8d8bc9f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42, skipping insertion in model container [2023-11-06 22:19:42,358 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:42,413 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:19:42,697 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2023-11-06 22:19:42,738 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:19:42,761 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:19:42,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 22:19:42,773 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [415] [2023-11-06 22:19:42,773 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [444] [2023-11-06 22:19:42,773 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [548] [2023-11-06 22:19:42,774 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [557] [2023-11-06 22:19:42,774 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [592] [2023-11-06 22:19:42,774 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [700] [2023-11-06 22:19:42,775 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [908] [2023-11-06 22:19:42,856 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2023-11-06 22:19:42,879 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:19:42,905 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:19:42,905 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42 WrapperNode [2023-11-06 22:19:42,906 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:19:42,907 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:19:42,907 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:19:42,907 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:19:42,915 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:42,941 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:42,979 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 207 [2023-11-06 22:19:42,980 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:19:42,980 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:19:42,981 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:19:42,981 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:19:42,990 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:42,991 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,003 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,007 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,013 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,022 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,034 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,036 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,038 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:19:43,039 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:19:43,039 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:19:43,040 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:19:43,040 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (1/1) ... [2023-11-06 22:19:43,047 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:19:43,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:19:43,076 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:19:43,085 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:19:43,118 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:19:43,118 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:19:43,118 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:19:43,118 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:19:43,118 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:19:43,119 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:19:43,119 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:19:43,119 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:19:43,119 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:19:43,120 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:19:43,120 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:19:43,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:19:43,120 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:19:43,120 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:19:43,121 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:19:43,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:19:43,207 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:19:43,210 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:19:43,478 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:19:43,486 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:19:43,486 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:19:43,488 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:19:43 BoogieIcfgContainer [2023-11-06 22:19:43,488 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:19:43,491 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:19:43,491 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:19:43,507 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:19:43,507 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:19:42" (1/3) ... [2023-11-06 22:19:43,508 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c918248 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:19:43, skipping insertion in model container [2023-11-06 22:19:43,508 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:19:42" (2/3) ... [2023-11-06 22:19:43,509 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c918248 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:19:43, skipping insertion in model container [2023-11-06 22:19:43,509 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:19:43" (3/3) ... [2023-11-06 22:19:43,512 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product50.cil.c [2023-11-06 22:19:43,527 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:19:43,528 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:19:43,575 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:19:43,582 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d97a0d6, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:19:43,582 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:19:43,586 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 65 states have (on average 1.4) internal successors, (91), 73 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:19:43,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:19:43,593 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:43,594 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:43,594 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:43,599 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:43,600 INFO L85 PathProgramCache]: Analyzing trace with hash -340967460, now seen corresponding path program 1 times [2023-11-06 22:19:43,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:43,607 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [4132318] [2023-11-06 22:19:43,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:43,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:43,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:43,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:43,829 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:43,829 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [4132318] [2023-11-06 22:19:43,830 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [4132318] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:43,830 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:43,831 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:19:43,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1363130028] [2023-11-06 22:19:43,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:43,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:19:43,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:43,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:19:43,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:19:43,882 INFO L87 Difference]: Start difference. First operand has 83 states, 65 states have (on average 1.4) internal successors, (91), 73 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:43,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:43,943 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2023-11-06 22:19:43,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:19:43,946 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:19:43,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:43,959 INFO L225 Difference]: With dead ends: 158 [2023-11-06 22:19:43,959 INFO L226 Difference]: Without dead ends: 74 [2023-11-06 22:19:43,965 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:19:43,971 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:43,973 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:19:43,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2023-11-06 22:19:44,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2023-11-06 22:19:44,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:19:44,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 96 transitions. [2023-11-06 22:19:44,043 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 96 transitions. Word has length 19 [2023-11-06 22:19:44,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:44,045 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 96 transitions. [2023-11-06 22:19:44,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:44,046 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 96 transitions. [2023-11-06 22:19:44,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:19:44,050 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:44,051 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:44,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:19:44,052 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:44,054 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:44,054 INFO L85 PathProgramCache]: Analyzing trace with hash -1018100204, now seen corresponding path program 1 times [2023-11-06 22:19:44,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:44,055 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833126021] [2023-11-06 22:19:44,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:44,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:44,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:44,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:44,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:44,233 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833126021] [2023-11-06 22:19:44,234 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833126021] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:44,234 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:44,234 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:19:44,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1706345993] [2023-11-06 22:19:44,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:44,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:19:44,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:44,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:19:44,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:19:44,240 INFO L87 Difference]: Start difference. First operand 74 states and 96 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:44,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:44,258 INFO L93 Difference]: Finished difference Result 113 states and 147 transitions. [2023-11-06 22:19:44,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:19:44,259 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:19:44,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:44,260 INFO L225 Difference]: With dead ends: 113 [2023-11-06 22:19:44,261 INFO L226 Difference]: Without dead ends: 65 [2023-11-06 22:19:44,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:19:44,263 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 13 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:44,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 149 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:19:44,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2023-11-06 22:19:44,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65. [2023-11-06 22:19:44,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-06 22:19:44,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 84 transitions. [2023-11-06 22:19:44,274 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 84 transitions. Word has length 20 [2023-11-06 22:19:44,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:44,274 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 84 transitions. [2023-11-06 22:19:44,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:44,275 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2023-11-06 22:19:44,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:19:44,276 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:44,276 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:44,276 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:19:44,277 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:44,277 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:44,277 INFO L85 PathProgramCache]: Analyzing trace with hash -2024480710, now seen corresponding path program 1 times [2023-11-06 22:19:44,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:44,278 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [411806190] [2023-11-06 22:19:44,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:44,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:44,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:44,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:44,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:44,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [411806190] [2023-11-06 22:19:44,527 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [411806190] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:44,527 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:44,527 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:19:44,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1685107571] [2023-11-06 22:19:44,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:44,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:19:44,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:44,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:19:44,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:19:44,529 INFO L87 Difference]: Start difference. First operand 65 states and 84 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:44,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:44,681 INFO L93 Difference]: Finished difference Result 123 states and 162 transitions. [2023-11-06 22:19:44,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:19:44,682 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-06 22:19:44,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:44,683 INFO L225 Difference]: With dead ends: 123 [2023-11-06 22:19:44,683 INFO L226 Difference]: Without dead ends: 65 [2023-11-06 22:19:44,684 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:19:44,686 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 107 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:44,686 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 175 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:19:44,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2023-11-06 22:19:44,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65. [2023-11-06 22:19:44,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-06 22:19:44,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 83 transitions. [2023-11-06 22:19:44,698 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 83 transitions. Word has length 25 [2023-11-06 22:19:44,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:44,699 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 83 transitions. [2023-11-06 22:19:44,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:44,699 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 83 transitions. [2023-11-06 22:19:44,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-06 22:19:44,709 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:44,710 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:44,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:19:44,710 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:44,714 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:44,714 INFO L85 PathProgramCache]: Analyzing trace with hash 1530438702, now seen corresponding path program 1 times [2023-11-06 22:19:44,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:44,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161698181] [2023-11-06 22:19:44,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:44,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:44,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:44,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:44,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:44,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:44,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:44,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:44,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:44,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161698181] [2023-11-06 22:19:44,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161698181] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:44,937 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:44,937 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:19:44,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [554426843] [2023-11-06 22:19:44,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:44,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:19:44,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:44,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:19:44,940 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:19:44,940 INFO L87 Difference]: Start difference. First operand 65 states and 83 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:19:45,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:45,113 INFO L93 Difference]: Finished difference Result 186 states and 238 transitions. [2023-11-06 22:19:45,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:19:45,113 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-06 22:19:45,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:45,123 INFO L225 Difference]: With dead ends: 186 [2023-11-06 22:19:45,123 INFO L226 Difference]: Without dead ends: 128 [2023-11-06 22:19:45,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:19:45,129 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 149 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 257 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:45,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 257 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:19:45,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2023-11-06 22:19:45,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 122. [2023-11-06 22:19:45,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2023-11-06 22:19:45,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 150 transitions. [2023-11-06 22:19:45,180 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 150 transitions. Word has length 35 [2023-11-06 22:19:45,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:45,182 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 150 transitions. [2023-11-06 22:19:45,182 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:19:45,182 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 150 transitions. [2023-11-06 22:19:45,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:19:45,186 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:45,186 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:45,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:19:45,187 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:45,187 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:45,187 INFO L85 PathProgramCache]: Analyzing trace with hash 699766483, now seen corresponding path program 1 times [2023-11-06 22:19:45,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:45,188 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504339075] [2023-11-06 22:19:45,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:45,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:45,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:45,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:45,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:45,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:45,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:45,426 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504339075] [2023-11-06 22:19:45,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504339075] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:45,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:45,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:19:45,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [671029274] [2023-11-06 22:19:45,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:45,430 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:19:45,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:45,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:19:45,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:19:45,432 INFO L87 Difference]: Start difference. First operand 122 states and 150 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:45,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:45,695 INFO L93 Difference]: Finished difference Result 332 states and 431 transitions. [2023-11-06 22:19:45,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:19:45,695 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:19:45,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:45,698 INFO L225 Difference]: With dead ends: 332 [2023-11-06 22:19:45,698 INFO L226 Difference]: Without dead ends: 217 [2023-11-06 22:19:45,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:19:45,701 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 129 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:45,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 334 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:19:45,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2023-11-06 22:19:45,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 198. [2023-11-06 22:19:45,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2023-11-06 22:19:45,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 249 transitions. [2023-11-06 22:19:45,738 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 249 transitions. Word has length 39 [2023-11-06 22:19:45,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:45,739 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 249 transitions. [2023-11-06 22:19:45,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:45,739 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 249 transitions. [2023-11-06 22:19:45,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:19:45,741 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:45,741 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:45,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:19:45,741 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:45,742 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:45,742 INFO L85 PathProgramCache]: Analyzing trace with hash 1720834837, now seen corresponding path program 1 times [2023-11-06 22:19:45,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:45,742 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192420340] [2023-11-06 22:19:45,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:45,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:45,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:45,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:45,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:45,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:45,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:45,841 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192420340] [2023-11-06 22:19:45,842 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192420340] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:45,842 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:45,847 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:19:45,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [585982503] [2023-11-06 22:19:45,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:45,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:19:45,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:45,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:19:45,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:19:45,850 INFO L87 Difference]: Start difference. First operand 198 states and 249 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:46,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:46,054 INFO L93 Difference]: Finished difference Result 403 states and 514 transitions. [2023-11-06 22:19:46,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:19:46,055 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:19:46,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:46,061 INFO L225 Difference]: With dead ends: 403 [2023-11-06 22:19:46,061 INFO L226 Difference]: Without dead ends: 212 [2023-11-06 22:19:46,062 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:19:46,068 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 54 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 331 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:46,071 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 331 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:19:46,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2023-11-06 22:19:46,123 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 204. [2023-11-06 22:19:46,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2023-11-06 22:19:46,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 255 transitions. [2023-11-06 22:19:46,126 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 255 transitions. Word has length 39 [2023-11-06 22:19:46,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:46,128 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 255 transitions. [2023-11-06 22:19:46,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:46,129 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 255 transitions. [2023-11-06 22:19:46,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:19:46,135 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:46,135 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:46,135 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:19:46,135 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:46,136 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:46,136 INFO L85 PathProgramCache]: Analyzing trace with hash 709717587, now seen corresponding path program 1 times [2023-11-06 22:19:46,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:46,136 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504724537] [2023-11-06 22:19:46,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:46,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:46,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:46,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:46,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:46,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:46,244 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:46,244 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504724537] [2023-11-06 22:19:46,244 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504724537] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:46,244 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:46,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:19:46,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560952122] [2023-11-06 22:19:46,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:46,245 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:19:46,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:46,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:19:46,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:19:46,247 INFO L87 Difference]: Start difference. First operand 204 states and 255 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:46,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:46,371 INFO L93 Difference]: Finished difference Result 372 states and 470 transitions. [2023-11-06 22:19:46,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:19:46,372 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:19:46,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:46,374 INFO L225 Difference]: With dead ends: 372 [2023-11-06 22:19:46,374 INFO L226 Difference]: Without dead ends: 175 [2023-11-06 22:19:46,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:19:46,376 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 57 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 85 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:46,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 215 Invalid, 85 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:19:46,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2023-11-06 22:19:46,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 170. [2023-11-06 22:19:46,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2023-11-06 22:19:46,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 205 transitions. [2023-11-06 22:19:46,401 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 205 transitions. Word has length 39 [2023-11-06 22:19:46,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:46,401 INFO L495 AbstractCegarLoop]: Abstraction has 170 states and 205 transitions. [2023-11-06 22:19:46,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:19:46,402 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 205 transitions. [2023-11-06 22:19:46,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:19:46,403 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:46,403 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:46,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:19:46,403 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:46,404 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:46,404 INFO L85 PathProgramCache]: Analyzing trace with hash 11284582, now seen corresponding path program 1 times [2023-11-06 22:19:46,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:46,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127682906] [2023-11-06 22:19:46,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:46,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:46,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:46,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:46,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:46,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:19:46,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:46,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:46,607 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:46,607 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127682906] [2023-11-06 22:19:46,607 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2127682906] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:46,607 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:46,607 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:19:46,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [14107021] [2023-11-06 22:19:46,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:46,608 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:19:46,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:46,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:19:46,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:19:46,610 INFO L87 Difference]: Start difference. First operand 170 states and 205 transitions. Second operand has 9 states, 9 states have (on average 4.0) internal successors, (36), 8 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:19:47,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:47,050 INFO L93 Difference]: Finished difference Result 429 states and 540 transitions. [2023-11-06 22:19:47,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-06 22:19:47,051 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.0) internal successors, (36), 8 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2023-11-06 22:19:47,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:47,055 INFO L225 Difference]: With dead ends: 429 [2023-11-06 22:19:47,055 INFO L226 Difference]: Without dead ends: 266 [2023-11-06 22:19:47,057 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=285, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:19:47,058 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 250 mSDsluCounter, 389 mSDsCounter, 0 mSdLazyCounter, 260 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 260 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:47,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [253 Valid, 460 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 260 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:19:47,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2023-11-06 22:19:47,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 257. [2023-11-06 22:19:47,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 205 states have (on average 1.2146341463414634) internal successors, (249), 218 states have internal predecessors, (249), 23 states have call successors, (23), 23 states have call predecessors, (23), 28 states have return successors, (40), 25 states have call predecessors, (40), 23 states have call successors, (40) [2023-11-06 22:19:47,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 312 transitions. [2023-11-06 22:19:47,119 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 312 transitions. Word has length 41 [2023-11-06 22:19:47,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:47,121 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 312 transitions. [2023-11-06 22:19:47,124 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.0) internal successors, (36), 8 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:19:47,124 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 312 transitions. [2023-11-06 22:19:47,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2023-11-06 22:19:47,126 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:47,127 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:47,127 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:19:47,128 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:47,128 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:47,129 INFO L85 PathProgramCache]: Analyzing trace with hash 1365828969, now seen corresponding path program 1 times [2023-11-06 22:19:47,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:47,130 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1210000781] [2023-11-06 22:19:47,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:47,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:47,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:47,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:19:47,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:47,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:47,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:47,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:19:47,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:47,284 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:19:47,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:47,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1210000781] [2023-11-06 22:19:47,285 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1210000781] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:19:47,285 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1000155847] [2023-11-06 22:19:47,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:47,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:19:47,285 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:19:47,288 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:19:47,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:19:47,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:47,396 INFO L262 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:19:47,406 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:19:47,589 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:47,589 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:19:47,717 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:47,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1000155847] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:19:47,718 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:19:47,718 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2023-11-06 22:19:47,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1124327562] [2023-11-06 22:19:47,719 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:19:47,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:19:47,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:47,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:19:47,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:19:47,721 INFO L87 Difference]: Start difference. First operand 257 states and 312 transitions. Second operand has 12 states, 12 states have (on average 8.0) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2023-11-06 22:19:48,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:48,753 INFO L93 Difference]: Finished difference Result 637 states and 824 transitions. [2023-11-06 22:19:48,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-06 22:19:48,754 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.0) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 71 [2023-11-06 22:19:48,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:48,758 INFO L225 Difference]: With dead ends: 637 [2023-11-06 22:19:48,758 INFO L226 Difference]: Without dead ends: 428 [2023-11-06 22:19:48,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 141 SyntacticMatches, 5 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 503 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=311, Invalid=1581, Unknown=0, NotChecked=0, Total=1892 [2023-11-06 22:19:48,762 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 267 mSDsluCounter, 750 mSDsCounter, 0 mSdLazyCounter, 700 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 271 SdHoareTripleChecker+Valid, 847 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 700 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:48,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [271 Valid, 847 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 700 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 22:19:48,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 428 states. [2023-11-06 22:19:48,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 428 to 359. [2023-11-06 22:19:48,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 359 states, 286 states have (on average 1.2167832167832169) internal successors, (348), 305 states have internal predecessors, (348), 34 states have call successors, (34), 33 states have call predecessors, (34), 38 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2023-11-06 22:19:48,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 359 states to 359 states and 443 transitions. [2023-11-06 22:19:48,818 INFO L78 Accepts]: Start accepts. Automaton has 359 states and 443 transitions. Word has length 71 [2023-11-06 22:19:48,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:48,818 INFO L495 AbstractCegarLoop]: Abstraction has 359 states and 443 transitions. [2023-11-06 22:19:48,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.0) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2023-11-06 22:19:48,819 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 443 transitions. [2023-11-06 22:19:48,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2023-11-06 22:19:48,821 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:48,821 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:48,833 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:19:49,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-06 22:19:49,033 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:49,034 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:49,034 INFO L85 PathProgramCache]: Analyzing trace with hash 703049801, now seen corresponding path program 1 times [2023-11-06 22:19:49,034 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:49,034 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1676783566] [2023-11-06 22:19:49,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:49,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:49,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:19:49,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:49,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:19:49,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:19:49,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:19:49,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:49,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,195 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 8 proven. 2 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2023-11-06 22:19:49,195 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:49,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1676783566] [2023-11-06 22:19:49,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1676783566] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:19:49,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [961586325] [2023-11-06 22:19:49,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:49,196 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:19:49,196 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:19:49,197 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:19:49,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:19:49,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:49,323 INFO L262 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 34 conjunts are in the unsatisfiable core [2023-11-06 22:19:49,332 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:19:49,631 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 11 proven. 41 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 22:19:49,631 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:19:50,111 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 44 proven. 6 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-06 22:19:50,111 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [961586325] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:19:50,111 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:19:50,112 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 13, 11] total 25 [2023-11-06 22:19:50,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2015167428] [2023-11-06 22:19:50,112 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:19:50,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-06 22:19:50,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:50,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-06 22:19:50,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=95, Invalid=505, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:19:50,117 INFO L87 Difference]: Start difference. First operand 359 states and 443 transitions. Second operand has 25 states, 25 states have (on average 7.8) internal successors, (195), 22 states have internal predecessors, (195), 9 states have call successors, (16), 7 states have call predecessors, (16), 8 states have return successors, (15), 9 states have call predecessors, (15), 9 states have call successors, (15) [2023-11-06 22:19:51,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:51,815 INFO L93 Difference]: Finished difference Result 728 states and 929 transitions. [2023-11-06 22:19:51,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2023-11-06 22:19:51,815 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 7.8) internal successors, (195), 22 states have internal predecessors, (195), 9 states have call successors, (16), 7 states have call predecessors, (16), 8 states have return successors, (15), 9 states have call predecessors, (15), 9 states have call successors, (15) Word has length 106 [2023-11-06 22:19:51,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:51,821 INFO L225 Difference]: With dead ends: 728 [2023-11-06 22:19:51,822 INFO L226 Difference]: Without dead ends: 419 [2023-11-06 22:19:51,824 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 269 GetRequests, 215 SyntacticMatches, 3 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 511 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=478, Invalid=2278, Unknown=0, NotChecked=0, Total=2756 [2023-11-06 22:19:51,825 INFO L413 NwaCegarLoop]: 163 mSDtfsCounter, 1020 mSDsluCounter, 1797 mSDsCounter, 0 mSdLazyCounter, 1876 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1023 SdHoareTripleChecker+Valid, 1960 SdHoareTripleChecker+Invalid, 2130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 1876 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:51,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1023 Valid, 1960 Invalid, 2130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 1876 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-11-06 22:19:51,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 419 states. [2023-11-06 22:19:51,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 419 to 382. [2023-11-06 22:19:51,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 382 states, 302 states have (on average 1.1887417218543046) internal successors, (359), 319 states have internal predecessors, (359), 39 states have call successors, (39), 38 states have call predecessors, (39), 40 states have return successors, (47), 37 states have call predecessors, (47), 39 states have call successors, (47) [2023-11-06 22:19:51,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 445 transitions. [2023-11-06 22:19:51,887 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 445 transitions. Word has length 106 [2023-11-06 22:19:51,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:51,888 INFO L495 AbstractCegarLoop]: Abstraction has 382 states and 445 transitions. [2023-11-06 22:19:51,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 7.8) internal successors, (195), 22 states have internal predecessors, (195), 9 states have call successors, (16), 7 states have call predecessors, (16), 8 states have return successors, (15), 9 states have call predecessors, (15), 9 states have call successors, (15) [2023-11-06 22:19:51,889 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 445 transitions. [2023-11-06 22:19:51,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2023-11-06 22:19:51,890 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:51,891 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:51,901 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:19:52,097 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:19:52,097 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:52,098 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:52,098 INFO L85 PathProgramCache]: Analyzing trace with hash 1937588267, now seen corresponding path program 1 times [2023-11-06 22:19:52,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:52,099 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [371152872] [2023-11-06 22:19:52,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:52,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:52,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:19:52,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:52,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:19:52,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:19:52,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:19:52,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:52,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2023-11-06 22:19:52,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:52,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,684 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:19:52,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:52,685 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [371152872] [2023-11-06 22:19:52,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [371152872] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:19:52,685 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1732420985] [2023-11-06 22:19:52,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:52,686 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:19:52,686 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:19:52,687 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:19:52,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:19:52,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:52,832 INFO L262 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 22:19:52,838 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:19:53,128 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 68 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:19:53,129 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:19:53,378 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 55 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-06 22:19:53,378 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1732420985] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:19:53,379 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:19:53,379 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 8] total 19 [2023-11-06 22:19:53,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358908876] [2023-11-06 22:19:53,379 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:19:53,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2023-11-06 22:19:53,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:53,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2023-11-06 22:19:53,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=267, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:19:53,383 INFO L87 Difference]: Start difference. First operand 382 states and 445 transitions. Second operand has 19 states, 19 states have (on average 6.473684210526316) internal successors, (123), 17 states have internal predecessors, (123), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-06 22:19:54,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:54,301 INFO L93 Difference]: Finished difference Result 852 states and 1020 transitions. [2023-11-06 22:19:54,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-06 22:19:54,302 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 6.473684210526316) internal successors, (123), 17 states have internal predecessors, (123), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) Word has length 113 [2023-11-06 22:19:54,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:54,307 INFO L225 Difference]: With dead ends: 852 [2023-11-06 22:19:54,307 INFO L226 Difference]: Without dead ends: 515 [2023-11-06 22:19:54,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 233 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 155 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=248, Invalid=682, Unknown=0, NotChecked=0, Total=930 [2023-11-06 22:19:54,311 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 439 mSDsluCounter, 642 mSDsCounter, 0 mSdLazyCounter, 730 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 443 SdHoareTripleChecker+Valid, 765 SdHoareTripleChecker+Invalid, 843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:54,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [443 Valid, 765 Invalid, 843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 730 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:19:54,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 515 states. [2023-11-06 22:19:54,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 515 to 412. [2023-11-06 22:19:54,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 324 states have (on average 1.191358024691358) internal successors, (386), 342 states have internal predecessors, (386), 43 states have call successors, (43), 41 states have call predecessors, (43), 44 states have return successors, (55), 42 states have call predecessors, (55), 43 states have call successors, (55) [2023-11-06 22:19:54,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 484 transitions. [2023-11-06 22:19:54,387 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 484 transitions. Word has length 113 [2023-11-06 22:19:54,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:54,388 INFO L495 AbstractCegarLoop]: Abstraction has 412 states and 484 transitions. [2023-11-06 22:19:54,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 6.473684210526316) internal successors, (123), 17 states have internal predecessors, (123), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-06 22:19:54,389 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 484 transitions. [2023-11-06 22:19:54,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2023-11-06 22:19:54,391 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:19:54,392 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:54,404 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:19:54,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:19:54,599 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:19:54,600 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:19:54,600 INFO L85 PathProgramCache]: Analyzing trace with hash -1481360023, now seen corresponding path program 1 times [2023-11-06 22:19:54,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:19:54,600 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [545954915] [2023-11-06 22:19:54,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:19:54,600 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:19:54,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:19:54,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:19:54,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:19:54,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:19:54,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:19:54,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:54,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2023-11-06 22:19:54,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:19:54,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:19:54,833 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2023-11-06 22:19:54,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:19:54,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [545954915] [2023-11-06 22:19:54,834 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [545954915] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:19:54,834 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:19:54,835 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:19:54,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2031817155] [2023-11-06 22:19:54,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:19:54,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:19:54,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:19:54,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:19:54,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:19:54,837 INFO L87 Difference]: Start difference. First operand 412 states and 484 transitions. Second operand has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:19:55,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:19:55,072 INFO L93 Difference]: Finished difference Result 602 states and 700 transitions. [2023-11-06 22:19:55,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:19:55,073 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 113 [2023-11-06 22:19:55,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:19:55,074 INFO L225 Difference]: With dead ends: 602 [2023-11-06 22:19:55,074 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:19:55,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:19:55,077 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 95 mSDsluCounter, 203 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:19:55,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 254 Invalid, 209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:19:55,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:19:55,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:19:55,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:19:55,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:19:55,079 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 113 [2023-11-06 22:19:55,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:19:55,079 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:19:55,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:19:55,080 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:19:55,080 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:19:55,083 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:19:55,084 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-06 22:19:55,087 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:19:58,166 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2023-11-06 22:19:58,166 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2023-11-06 22:19:58,166 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 635) the Hoare annotation is: true [2023-11-06 22:19:58,166 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 624 635) no Hoare annotation was computed. [2023-11-06 22:19:58,167 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 624 635) no Hoare annotation was computed. [2023-11-06 22:19:58,167 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2023-11-06 22:19:58,167 INFO L899 garLoopResultBuilder]: For program point L890-2(lines 890 894) no Hoare annotation was computed. [2023-11-06 22:19:58,167 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 691 699) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 1)) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 22:19:58,168 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (= |old(~waterLevel~0)| 2))))) [2023-11-06 22:19:58,168 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2023-11-06 22:19:58,168 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 668 676) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= ~waterLevel~0 1))) (and (or .cse0 (and (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse1 .cse4)) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse3 .cse1 .cse4)))) [2023-11-06 22:19:58,168 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse1 (not (= |old(~waterLevel~0)| 2)) (and .cse2 (= 2 ~waterLevel~0) .cse0)))) [2023-11-06 22:19:58,169 INFO L895 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0)) (.cse6 (= |old(~waterLevel~0)| 2))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= 2 ~waterLevel~0) .cse7 .cse6)) (.cse1 (not .cse7)) (.cse5 (not .cse6)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3)) (or .cse0 .cse4 .cse1 .cse5) (or .cse4 .cse1 .cse5 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse3))))) [2023-11-06 22:19:58,169 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2023-11-06 22:19:58,169 INFO L899 garLoopResultBuilder]: For program point L553(line 553) no Hoare annotation was computed. [2023-11-06 22:19:58,169 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 549 556) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (= |old(~waterLevel~0)| 2))))) [2023-11-06 22:19:58,169 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 707 730) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0)) (not (= |old(~waterLevel~0)| 2))))) [2023-11-06 22:19:58,170 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2023-11-06 22:19:58,170 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2023-11-06 22:19:58,170 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2023-11-06 22:19:58,170 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 798 805) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= ~waterLevel~0 1)) (not (= |old(~waterLevel~0)| 2))) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2023-11-06 22:19:58,170 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 881 899) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= ~waterLevel~0 1) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse2))) [2023-11-06 22:19:58,171 INFO L899 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2023-11-06 22:19:58,171 INFO L895 garLoopResultBuilder]: At program point L604-2(lines 600 611) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 2))))) [2023-11-06 22:19:58,171 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2023-11-06 22:19:58,171 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 440) no Hoare annotation was computed. [2023-11-06 22:19:58,171 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2023-11-06 22:19:58,172 INFO L895 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse4 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |old(~waterLevel~0)| 2)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse1 (and (= 2 ~waterLevel~0) .cse9 .cse4 .cse5 .cse8)) (.cse2 (not .cse8))) (and (or .cse0 .cse1 .cse2 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse4 .cse5 .cse6)) (or .cse7 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse3 .cse4 .cse5 .cse6)) (or .cse7 .cse0 .cse1 .cse2)))) [2023-11-06 22:19:58,172 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 817 825) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (= |old(~waterLevel~0)| 2))))) [2023-11-06 22:19:58,172 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 553) no Hoare annotation was computed. [2023-11-06 22:19:58,172 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 447 476) no Hoare annotation was computed. [2023-11-06 22:19:58,184 INFO L902 garLoopResultBuilder]: At program point L472(lines 447 476) the Hoare annotation is: true [2023-11-06 22:19:58,185 INFO L899 garLoopResultBuilder]: For program point L468(line 468) no Hoare annotation was computed. [2023-11-06 22:19:58,185 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 465) no Hoare annotation was computed. [2023-11-06 22:19:58,185 INFO L902 garLoopResultBuilder]: At program point L461-1(lines 461 465) the Hoare annotation is: true [2023-11-06 22:19:58,185 INFO L899 garLoopResultBuilder]: For program point L458(line 458) no Hoare annotation was computed. [2023-11-06 22:19:58,185 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 447 476) the Hoare annotation is: true [2023-11-06 22:19:58,186 INFO L902 garLoopResultBuilder]: At program point L457-2(lines 457 471) the Hoare annotation is: true [2023-11-06 22:19:58,186 INFO L902 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: true [2023-11-06 22:19:58,186 INFO L899 garLoopResultBuilder]: For program point L453-1(line 453) no Hoare annotation was computed. [2023-11-06 22:19:58,186 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 900 907) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,186 INFO L899 garLoopResultBuilder]: For program point L535(lines 535 542) no Hoare annotation was computed. [2023-11-06 22:19:58,186 INFO L899 garLoopResultBuilder]: For program point L535-2(lines 535 542) no Hoare annotation was computed. [2023-11-06 22:19:58,186 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 512 521) the Hoare annotation is: true [2023-11-06 22:19:58,187 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 569 575) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:19:58,187 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 525 547) the Hoare annotation is: true [2023-11-06 22:19:58,187 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:19:58,187 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 961) no Hoare annotation was computed. [2023-11-06 22:19:58,187 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:19:58,187 INFO L895 garLoopResultBuilder]: At program point L957-2(lines 949 962) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,187 INFO L899 garLoopResultBuilder]: For program point L920(lines 919 966) no Hoare annotation was computed. [2023-11-06 22:19:58,187 INFO L899 garLoopResultBuilder]: For program point L949(lines 949 962) no Hoare annotation was computed. [2023-11-06 22:19:58,187 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,188 INFO L902 garLoopResultBuilder]: At program point L970(lines 909 974) the Hoare annotation is: true [2023-11-06 22:19:58,188 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 504 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= ~waterLevel~0 1)) [2023-11-06 22:19:58,188 INFO L899 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2023-11-06 22:19:58,188 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:19:58,188 INFO L899 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2023-11-06 22:19:58,188 INFO L899 garLoopResultBuilder]: For program point L921(lines 921 925) no Hoare annotation was computed. [2023-11-06 22:19:58,188 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:19:58,188 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 576 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:19:58,189 INFO L895 garLoopResultBuilder]: At program point L967(lines 918 968) the Hoare annotation is: false [2023-11-06 22:19:58,189 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 583 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:19:58,189 INFO L899 garLoopResultBuilder]: For program point L939(lines 939 945) no Hoare annotation was computed. [2023-11-06 22:19:58,189 INFO L899 garLoopResultBuilder]: For program point L939-1(lines 939 945) no Hoare annotation was computed. [2023-11-06 22:19:58,189 INFO L895 garLoopResultBuilder]: At program point L964(lines 919 966) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,190 INFO L895 garLoopResultBuilder]: At program point L931(line 931) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,190 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 790 797) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:19:58,190 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-11-06 22:19:58,190 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2023-11-06 22:19:58,190 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))))) [2023-11-06 22:19:58,191 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 677 690) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2)))) [2023-11-06 22:19:58,191 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 862 880) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|))))) [2023-11-06 22:19:58,191 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2023-11-06 22:19:58,191 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse4)) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) .cse4))) (and (or .cse0 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3)))) [2023-11-06 22:19:58,192 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2023-11-06 22:19:58,192 INFO L899 garLoopResultBuilder]: For program point L681(lines 681 687) no Hoare annotation was computed. [2023-11-06 22:19:58,195 INFO L899 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2023-11-06 22:19:58,195 INFO L899 garLoopResultBuilder]: For program point L871(lines 871 875) no Hoare annotation was computed. [2023-11-06 22:19:58,195 INFO L899 garLoopResultBuilder]: For program point L871-2(lines 871 875) no Hoare annotation was computed. [2023-11-06 22:19:58,195 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 612 623) no Hoare annotation was computed. [2023-11-06 22:19:58,195 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 612 623) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= 2 ~waterLevel~0) .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2023-11-06 22:19:58,196 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 612 623) no Hoare annotation was computed. [2023-11-06 22:19:58,198 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:19:58,201 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:19:58,231 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:19:58 BoogieIcfgContainer [2023-11-06 22:19:58,231 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:19:58,232 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:19:58,232 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:19:58,233 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:19:58,233 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:19:43" (3/4) ... [2023-11-06 22:19:58,235 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:19:58,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:19:58,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:19:58,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:19:58,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:19:58,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:19:58,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:19:58,251 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:19:58,252 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:19:58,253 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:19:58,254 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:19:58,255 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:19:58,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:19:58,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (waterLevel == 1)) [2023-11-06 22:19:58,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:19:58,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (waterLevel == 1)) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || (((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2))) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) && ((((((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1)))) [2023-11-06 22:19:58,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || ((2 == waterLevel) && (1 <= \result))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (waterLevel == 1)))) [2023-11-06 22:19:58,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:19:58,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (waterLevel == 1))) || !((\old(waterLevel) == 2)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:19:58,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) || ((pumpRunning == 0) && (\result == 0))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:19:58,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) && ((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (tmp == 0)) && (1 <= \result)) && (waterLevel == 1)) && (1 <= tmp___0))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (\result == 0)) && (1 <= tmp)))) [2023-11-06 22:19:58,296 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,296 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((1 == systemActive)) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:19:58,296 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) [2023-11-06 22:19:58,345 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:19:58,345 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (waterLevel == 1)) [2023-11-06 22:19:58,345 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:19:58,346 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (waterLevel == 1)) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,346 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || (((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2))) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) && ((((((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1)))) [2023-11-06 22:19:58,347 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || ((2 == waterLevel) && (1 <= \result))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (waterLevel == 1)))) [2023-11-06 22:19:58,347 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:19:58,347 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (waterLevel == 1))) || !((\old(waterLevel) == 2)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:19:58,348 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,348 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) || ((pumpRunning == 0) && (\result == 0))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:19:58,348 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,348 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) && ((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (tmp == 0)) && (1 <= \result)) && (waterLevel == 1)) && (1 <= tmp___0))) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,349 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (\result == 0)) && (1 <= tmp)))) [2023-11-06 22:19:58,349 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:19:58,349 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((1 == systemActive)) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:19:58,349 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) [2023-11-06 22:19:58,369 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:19:58,369 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:19:58,370 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:19:58,371 INFO L158 Benchmark]: Toolchain (without parser) took 16026.32ms. Allocated memory was 184.5MB in the beginning and 289.4MB in the end (delta: 104.9MB). Free memory was 138.5MB in the beginning and 142.5MB in the end (delta: -4.0MB). Peak memory consumption was 102.5MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,371 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 117.4MB. Free memory is still 68.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:19:58,372 INFO L158 Benchmark]: CACSL2BoogieTranslator took 560.61ms. Allocated memory is still 184.5MB. Free memory was 137.9MB in the beginning and 118.5MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,372 INFO L158 Benchmark]: Boogie Procedure Inliner took 72.85ms. Allocated memory is still 184.5MB. Free memory was 118.5MB in the beginning and 116.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,373 INFO L158 Benchmark]: Boogie Preprocessor took 58.11ms. Allocated memory is still 184.5MB. Free memory was 116.4MB in the beginning and 114.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,374 INFO L158 Benchmark]: RCFGBuilder took 449.11ms. Allocated memory is still 184.5MB. Free memory was 114.8MB in the beginning and 98.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,374 INFO L158 Benchmark]: TraceAbstraction took 14740.28ms. Allocated memory was 184.5MB in the beginning and 289.4MB in the end (delta: 104.9MB). Free memory was 97.5MB in the beginning and 149.8MB in the end (delta: -52.3MB). Peak memory consumption was 115.1MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,375 INFO L158 Benchmark]: Witness Printer took 137.78ms. Allocated memory is still 289.4MB. Free memory was 149.8MB in the beginning and 142.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:19:58,377 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 117.4MB. Free memory is still 68.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 560.61ms. Allocated memory is still 184.5MB. Free memory was 137.9MB in the beginning and 118.5MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 72.85ms. Allocated memory is still 184.5MB. Free memory was 118.5MB in the beginning and 116.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 58.11ms. Allocated memory is still 184.5MB. Free memory was 116.4MB in the beginning and 114.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 449.11ms. Allocated memory is still 184.5MB. Free memory was 114.8MB in the beginning and 98.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 14740.28ms. Allocated memory was 184.5MB in the beginning and 289.4MB in the end (delta: 104.9MB). Free memory was 97.5MB in the beginning and 149.8MB in the end (delta: -52.3MB). Peak memory consumption was 115.1MB. Max. memory is 16.1GB. * Witness Printer took 137.78ms. Allocated memory is still 289.4MB. Free memory was 149.8MB in the beginning and 142.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [415] - GenericResultAtLocation [Line: 444]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [444] - GenericResultAtLocation [Line: 548]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [548] - GenericResultAtLocation [Line: 557]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [557] - GenericResultAtLocation [Line: 592]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [592] - GenericResultAtLocation [Line: 700]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [700] - GenericResultAtLocation [Line: 908]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [908] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 553]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.6s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2607 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2580 mSDsluCounter, 5852 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4756 mSDsCounter, 593 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4173 IncrementalHoareTripleChecker+Invalid, 4766 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 593 mSolverCounterUnsat, 1096 mSDtfsCounter, 4173 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 835 GetRequests, 638 SyntacticMatches, 12 SemanticMatches, 185 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1250 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=412occurred in iteration=11, InterpolantAutomatonStates: 157, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 256 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 1074 PreInvPairs, 1146 NumberOfFragments, 1055 HoareAnnotationTreeSize, 1074 FomulaSimplifications, 5039 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 39 FomulaSimplificationsInter, 4502 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 950 NumberOfCodeBlocks, 950 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1222 ConstructedInterpolants, 0 QuantifiedInterpolants, 2663 SizeOfPredicates, 12 NumberOfNonLiveVariables, 1006 ConjunctsInSsa, 53 ConjunctsInUnsatCore, 18 InterpolantComputations, 9 PerfectInterpolantSequences, 465/554 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (waterLevel == 1)) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((((!((1 == systemActive)) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (waterLevel == 1)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((2 == waterLevel) && (1 == systemActive)) && (1 <= tmp)) && (1 <= \result)) && (\old(waterLevel) == 2))) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 900]: Loop Invariant Derived loop invariant: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || ((2 == waterLevel) && (1 <= \result))) || !((\old(waterLevel) == 2))) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= \result)) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (waterLevel == 1)))) - InvariantResult [Line: 583]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 600]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (waterLevel == 1)) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((((2 == waterLevel) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) && ((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (tmp == 0)) && (1 <= \result)) && (waterLevel == 1)) && (1 <= tmp___0))) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || (((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2))) || !((1 == systemActive))) || !((\old(waterLevel) == 2)))) && ((((((2 == waterLevel) && (1 == systemActive)) && (\old(waterLevel) == 2)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) || (((((\result == 0) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1)))) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && (!((1 == systemActive)) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) || ((pumpRunning == 0) && (\result == 0))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= \result) && (pumpRunning == 0)))) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((\old(waterLevel) == 2))) && ((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (waterLevel == 1))) || !((\old(waterLevel) == 2)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) - InvariantResult [Line: 798]: Loop Invariant Derived loop invariant: (((!((1 == systemActive)) || ((((((\result == 0) && !((\old(pumpRunning) == 0))) && (pumpRunning == 0)) && (1 <= \result)) && (1 <= tmp)) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (\result == 0)) && (1 <= tmp)))) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:19:58,428 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b3ffa36c-3aa7-4dcd-b00a-c6c6c6558879/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE