./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:24:27,751 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:24:27,887 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:24:27,897 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:24:27,898 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:24:27,940 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:24:27,940 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:24:27,941 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:24:27,942 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:24:27,947 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:24:27,948 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:24:27,949 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:24:27,950 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:24:27,951 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:24:27,952 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:24:27,952 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:24:27,953 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:24:27,953 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:24:27,954 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:24:27,954 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:24:27,955 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:24:27,955 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:24:27,956 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:24:27,956 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:24:27,956 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:24:27,957 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:24:27,957 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:24:27,958 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:24:27,959 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:24:27,959 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:24:27,961 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:24:27,961 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:24:27,961 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:24:27,961 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:24:27,962 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:24:27,962 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:24:27,962 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:24:27,963 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:24:27,963 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:24:27,963 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:24:27,963 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:24:27,964 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:24:27,964 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2023-11-21 22:24:28,262 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:24:28,288 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:24:28,291 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:24:28,292 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:24:28,293 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:24:28,294 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2023-11-21 22:24:31,494 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:24:31,761 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:24:31,762 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2023-11-21 22:24:31,781 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/data/4f4d0c8c8/000590ba2afb400d9142bad4f761350d/FLAGcce7a2b2c [2023-11-21 22:24:31,797 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/data/4f4d0c8c8/000590ba2afb400d9142bad4f761350d [2023-11-21 22:24:31,799 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:24:31,801 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:24:31,803 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:24:31,803 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:24:31,814 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:24:31,815 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:24:31" (1/1) ... [2023-11-21 22:24:31,816 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6bb6252c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:31, skipping insertion in model container [2023-11-21 22:24:31,817 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:24:31" (1/1) ... [2023-11-21 22:24:31,875 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:24:32,195 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2023-11-21 22:24:32,203 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:24:32,215 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:24:32,226 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2023-11-21 22:24:32,228 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [155] [2023-11-21 22:24:32,228 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [197] [2023-11-21 22:24:32,228 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [563] [2023-11-21 22:24:32,229 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [631] [2023-11-21 22:24:32,229 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [868] [2023-11-21 22:24:32,229 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [972] [2023-11-21 22:24:32,229 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1007] [2023-11-21 22:24:32,304 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2023-11-21 22:24:32,305 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:24:32,327 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:24:32,328 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32 WrapperNode [2023-11-21 22:24:32,328 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:24:32,329 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:24:32,329 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:24:32,329 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:24:32,338 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,354 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,386 INFO L138 Inliner]: procedures = 58, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 227 [2023-11-21 22:24:32,386 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:24:32,387 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:24:32,387 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:24:32,387 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:24:32,400 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,400 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,403 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,416 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:24:32,417 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,417 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,424 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,430 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,432 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,434 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,437 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:24:32,438 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:24:32,438 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:24:32,439 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:24:32,440 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (1/1) ... [2023-11-21 22:24:32,447 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:24:32,482 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:32,505 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:24:32,509 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:24:32,541 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:24:32,541 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:24:32,541 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:24:32,541 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-21 22:24:32,541 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-21 22:24:32,542 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:24:32,542 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:24:32,542 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:24:32,542 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:24:32,542 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:24:32,542 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:24:32,542 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:24:32,543 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:24:32,543 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:24:32,543 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:24:32,543 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:24:32,543 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:24:32,543 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:24:32,544 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:24:32,544 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:24:32,544 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:24:32,544 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:24:32,630 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:24:32,639 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:24:32,989 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:24:33,256 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:24:33,256 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:24:33,259 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:24:33 BoogieIcfgContainer [2023-11-21 22:24:33,259 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:24:33,262 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:24:33,262 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:24:33,266 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:24:33,266 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:24:31" (1/3) ... [2023-11-21 22:24:33,267 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4579c87a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:24:33, skipping insertion in model container [2023-11-21 22:24:33,268 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:32" (2/3) ... [2023-11-21 22:24:33,270 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4579c87a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:24:33, skipping insertion in model container [2023-11-21 22:24:33,270 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:24:33" (3/3) ... [2023-11-21 22:24:33,272 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2023-11-21 22:24:33,294 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:24:33,295 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:24:33,374 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:24:33,385 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@42618b3f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:24:33,385 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:24:33,390 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-21 22:24:33,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-21 22:24:33,403 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:33,403 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:33,404 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:33,410 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:33,411 INFO L85 PathProgramCache]: Analyzing trace with hash 1984524575, now seen corresponding path program 1 times [2023-11-21 22:24:33,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:33,422 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047016465] [2023-11-21 22:24:33,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:33,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:33,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:33,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-21 22:24:33,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:33,632 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:33,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:33,633 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047016465] [2023-11-21 22:24:33,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047016465] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:33,635 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:33,635 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:24:33,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163620870] [2023-11-21 22:24:33,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:33,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:24:33,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:33,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:24:33,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:24:33,707 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:33,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:33,829 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2023-11-21 22:24:33,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:24:33,832 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-21 22:24:33,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:33,844 INFO L225 Difference]: With dead ends: 136 [2023-11-21 22:24:33,845 INFO L226 Difference]: Without dead ends: 64 [2023-11-21 22:24:33,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:24:33,855 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:33,857 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:24:33,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-21 22:24:33,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-21 22:24:33,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-21 22:24:33,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2023-11-21 22:24:33,916 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2023-11-21 22:24:33,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:33,917 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2023-11-21 22:24:33,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:33,917 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2023-11-21 22:24:33,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-21 22:24:33,920 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:33,921 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:33,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:24:33,922 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:33,922 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:33,923 INFO L85 PathProgramCache]: Analyzing trace with hash 195790186, now seen corresponding path program 1 times [2023-11-21 22:24:33,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:33,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [298780769] [2023-11-21 22:24:33,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:33,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:33,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:24:34,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:34,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:34,061 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [298780769] [2023-11-21 22:24:34,062 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [298780769] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:34,062 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:34,062 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:24:34,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [196301917] [2023-11-21 22:24:34,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:34,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:24:34,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:34,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:24:34,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:24:34,066 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:34,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:34,114 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2023-11-21 22:24:34,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:24:34,115 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-21 22:24:34,115 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:34,117 INFO L225 Difference]: With dead ends: 105 [2023-11-21 22:24:34,117 INFO L226 Difference]: Without dead ends: 56 [2023-11-21 22:24:34,118 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:24:34,120 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:34,121 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:24:34,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-21 22:24:34,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-21 22:24:34,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-21 22:24:34,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2023-11-21 22:24:34,132 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2023-11-21 22:24:34,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:34,133 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2023-11-21 22:24:34,133 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:34,133 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2023-11-21 22:24:34,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-21 22:24:34,135 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:34,135 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:34,135 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:24:34,136 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:34,136 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:34,136 INFO L85 PathProgramCache]: Analyzing trace with hash -750671160, now seen corresponding path program 1 times [2023-11-21 22:24:34,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:34,137 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [688825809] [2023-11-21 22:24:34,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:34,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:34,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:24:34,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:34,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:34,335 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [688825809] [2023-11-21 22:24:34,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [688825809] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:34,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:34,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:24:34,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [196746298] [2023-11-21 22:24:34,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:34,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:24:34,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:34,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:24:34,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:24:34,338 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:34,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:34,436 INFO L93 Difference]: Finished difference Result 110 states and 143 transitions. [2023-11-21 22:24:34,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:24:34,436 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-21 22:24:34,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:34,438 INFO L225 Difference]: With dead ends: 110 [2023-11-21 22:24:34,438 INFO L226 Difference]: Without dead ends: 56 [2023-11-21 22:24:34,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:24:34,440 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 62 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:34,441 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 75 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:24:34,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-21 22:24:34,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-21 22:24:34,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 43 states have internal predecessors, (45), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-21 22:24:34,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2023-11-21 22:24:34,452 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2023-11-21 22:24:34,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:34,453 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2023-11-21 22:24:34,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:24:34,453 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2023-11-21 22:24:34,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-21 22:24:34,455 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:34,455 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:34,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:24:34,455 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:34,456 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:34,456 INFO L85 PathProgramCache]: Analyzing trace with hash 1416911569, now seen corresponding path program 1 times [2023-11-21 22:24:34,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:34,456 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [26999388] [2023-11-21 22:24:34,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:34,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:34,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:24:34,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:24:34,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-21 22:24:34,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:34,574 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:24:34,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:34,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [26999388] [2023-11-21 22:24:34,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [26999388] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:34,575 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:34,576 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:24:34,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [586580858] [2023-11-21 22:24:34,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:34,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:24:34,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:34,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:24:34,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:24:34,578 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-21 22:24:34,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:34,794 INFO L93 Difference]: Finished difference Result 177 states and 228 transitions. [2023-11-21 22:24:34,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:24:34,795 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2023-11-21 22:24:34,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:34,801 INFO L225 Difference]: With dead ends: 177 [2023-11-21 22:24:34,801 INFO L226 Difference]: Without dead ends: 123 [2023-11-21 22:24:34,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:24:34,809 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 100 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:34,810 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 127 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:24:34,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2023-11-21 22:24:34,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 117. [2023-11-21 22:24:34,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 77 states have (on average 1.2857142857142858) internal successors, (99), 85 states have internal predecessors, (99), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-21 22:24:34,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 148 transitions. [2023-11-21 22:24:34,849 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 148 transitions. Word has length 30 [2023-11-21 22:24:34,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:34,850 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 148 transitions. [2023-11-21 22:24:34,851 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-21 22:24:34,851 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 148 transitions. [2023-11-21 22:24:34,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-21 22:24:34,855 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:34,855 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:34,856 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:24:34,856 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:34,858 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:34,858 INFO L85 PathProgramCache]: Analyzing trace with hash -767747420, now seen corresponding path program 1 times [2023-11-21 22:24:34,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:34,859 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041938392] [2023-11-21 22:24:34,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:34,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:34,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:24:35,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:35,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-21 22:24:35,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:35,357 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:35,358 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041938392] [2023-11-21 22:24:35,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041938392] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:35,360 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:35,360 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-21 22:24:35,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694622023] [2023-11-21 22:24:35,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:35,363 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:24:35,363 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:35,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:24:35,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:24:35,366 INFO L87 Difference]: Start difference. First operand 117 states and 148 transitions. Second operand has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:24:35,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:35,789 INFO L93 Difference]: Finished difference Result 303 states and 379 transitions. [2023-11-21 22:24:35,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:24:35,790 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 33 [2023-11-21 22:24:35,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:35,794 INFO L225 Difference]: With dead ends: 303 [2023-11-21 22:24:35,797 INFO L226 Difference]: Without dead ends: 188 [2023-11-21 22:24:35,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:24:35,802 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 131 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 256 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:35,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 256 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:24:35,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2023-11-21 22:24:35,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 157. [2023-11-21 22:24:35,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 104 states have (on average 1.2596153846153846) internal successors, (131), 113 states have internal predecessors, (131), 25 states have call successors, (25), 22 states have call predecessors, (25), 27 states have return successors, (36), 27 states have call predecessors, (36), 25 states have call successors, (36) [2023-11-21 22:24:35,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 192 transitions. [2023-11-21 22:24:35,847 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 192 transitions. Word has length 33 [2023-11-21 22:24:35,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:35,848 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 192 transitions. [2023-11-21 22:24:35,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:24:35,849 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 192 transitions. [2023-11-21 22:24:35,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-11-21 22:24:35,850 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:35,851 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:35,851 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:24:35,851 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:35,852 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:35,852 INFO L85 PathProgramCache]: Analyzing trace with hash 1467566179, now seen corresponding path program 1 times [2023-11-21 22:24:35,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:35,852 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [552850567] [2023-11-21 22:24:35,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:35,853 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:35,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:24:35,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:24:35,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:35,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-21 22:24:35,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:35,938 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:35,939 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:35,939 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [552850567] [2023-11-21 22:24:35,939 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [552850567] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:35,939 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:24:35,940 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:24:35,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1668715040] [2023-11-21 22:24:35,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:35,941 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:24:35,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:35,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:24:35,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:24:35,942 INFO L87 Difference]: Start difference. First operand 157 states and 192 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:24:36,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:36,339 INFO L93 Difference]: Finished difference Result 314 states and 397 transitions. [2023-11-21 22:24:36,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:24:36,340 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2023-11-21 22:24:36,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:36,347 INFO L225 Difference]: With dead ends: 314 [2023-11-21 22:24:36,347 INFO L226 Difference]: Without dead ends: 312 [2023-11-21 22:24:36,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:24:36,351 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 125 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:36,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [128 Valid, 112 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:24:36,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2023-11-21 22:24:36,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 310. [2023-11-21 22:24:36,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 205 states have (on average 1.2390243902439024) internal successors, (254), 222 states have internal predecessors, (254), 50 states have call successors, (50), 44 states have call predecessors, (50), 54 states have return successors, (86), 54 states have call predecessors, (86), 50 states have call successors, (86) [2023-11-21 22:24:36,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 390 transitions. [2023-11-21 22:24:36,448 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 390 transitions. Word has length 36 [2023-11-21 22:24:36,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:36,449 INFO L495 AbstractCegarLoop]: Abstraction has 310 states and 390 transitions. [2023-11-21 22:24:36,449 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:24:36,450 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 390 transitions. [2023-11-21 22:24:36,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-21 22:24:36,454 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:36,454 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:36,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:24:36,456 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:36,457 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:36,457 INFO L85 PathProgramCache]: Analyzing trace with hash -434988118, now seen corresponding path program 1 times [2023-11-21 22:24:36,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:36,458 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [907324787] [2023-11-21 22:24:36,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:36,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:36,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:24:36,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:24:36,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:36,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:36,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:24:36,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:24:36,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:24:36,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-21 22:24:36,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,670 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-21 22:24:36,671 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:36,671 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [907324787] [2023-11-21 22:24:36,671 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [907324787] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:24:36,672 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [483618042] [2023-11-21 22:24:36,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:36,672 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:36,673 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:36,675 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:24:36,702 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:24:36,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:36,798 INFO L262 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-21 22:24:36,805 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:24:36,854 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-21 22:24:36,854 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:24:36,855 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [483618042] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:24:36,855 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:24:36,855 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 7 [2023-11-21 22:24:36,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528948841] [2023-11-21 22:24:36,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:24:36,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:24:36,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:36,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:24:36,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:24:36,864 INFO L87 Difference]: Start difference. First operand 310 states and 390 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-21 22:24:36,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:36,975 INFO L93 Difference]: Finished difference Result 560 states and 708 transitions. [2023-11-21 22:24:36,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:24:36,976 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2023-11-21 22:24:36,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:36,978 INFO L225 Difference]: With dead ends: 560 [2023-11-21 22:24:36,979 INFO L226 Difference]: Without dead ends: 252 [2023-11-21 22:24:36,980 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:24:36,981 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 42 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:36,981 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 175 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:24:36,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2023-11-21 22:24:37,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 233. [2023-11-21 22:24:37,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 150 states have (on average 1.22) internal successors, (183), 165 states have internal predecessors, (183), 39 states have call successors, (39), 34 states have call predecessors, (39), 43 states have return successors, (65), 41 states have call predecessors, (65), 39 states have call successors, (65) [2023-11-21 22:24:37,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 287 transitions. [2023-11-21 22:24:37,016 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 287 transitions. Word has length 65 [2023-11-21 22:24:37,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:37,016 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 287 transitions. [2023-11-21 22:24:37,017 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-21 22:24:37,017 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 287 transitions. [2023-11-21 22:24:37,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-21 22:24:37,019 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:37,019 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:37,046 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 22:24:37,241 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:37,241 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:37,242 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:37,242 INFO L85 PathProgramCache]: Analyzing trace with hash -888993678, now seen corresponding path program 1 times [2023-11-21 22:24:37,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:37,242 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1634353726] [2023-11-21 22:24:37,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:37,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:37,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:24:37,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:24:37,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:37,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:37,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:24:37,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:24:37,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:24:37,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:37,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-21 22:24:37,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,480 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 5 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-21 22:24:37,480 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:37,480 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1634353726] [2023-11-21 22:24:37,480 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1634353726] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:24:37,480 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [273298453] [2023-11-21 22:24:37,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:37,481 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:37,481 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:37,482 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:24:37,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:24:37,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:37,605 INFO L262 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 6 conjunts are in the unsatisfiable core [2023-11-21 22:24:37,612 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:24:37,729 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-21 22:24:37,729 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:24:37,908 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-21 22:24:37,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [273298453] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:24:37,908 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:24:37,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 12 [2023-11-21 22:24:37,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495213157] [2023-11-21 22:24:37,909 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:24:37,910 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-21 22:24:37,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:37,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-21 22:24:37,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:24:37,911 INFO L87 Difference]: Start difference. First operand 233 states and 287 transitions. Second operand has 12 states, 12 states have (on average 6.166666666666667) internal successors, (74), 10 states have internal predecessors, (74), 6 states have call successors, (22), 9 states have call predecessors, (22), 5 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2023-11-21 22:24:38,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:38,259 INFO L93 Difference]: Finished difference Result 402 states and 502 transitions. [2023-11-21 22:24:38,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-21 22:24:38,260 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 6.166666666666667) internal successors, (74), 10 states have internal predecessors, (74), 6 states have call successors, (22), 9 states have call predecessors, (22), 5 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 73 [2023-11-21 22:24:38,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:38,262 INFO L225 Difference]: With dead ends: 402 [2023-11-21 22:24:38,262 INFO L226 Difference]: Without dead ends: 208 [2023-11-21 22:24:38,263 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 164 SyntacticMatches, 3 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=91, Invalid=251, Unknown=0, NotChecked=0, Total=342 [2023-11-21 22:24:38,264 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 196 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 332 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 332 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:38,265 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 224 Invalid, 426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 332 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:24:38,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2023-11-21 22:24:38,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 208. [2023-11-21 22:24:38,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 134 states have (on average 1.171641791044776) internal successors, (157), 148 states have internal predecessors, (157), 35 states have call successors, (35), 31 states have call predecessors, (35), 38 states have return successors, (45), 36 states have call predecessors, (45), 35 states have call successors, (45) [2023-11-21 22:24:38,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 237 transitions. [2023-11-21 22:24:38,295 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 237 transitions. Word has length 73 [2023-11-21 22:24:38,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:38,298 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 237 transitions. [2023-11-21 22:24:38,298 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 6.166666666666667) internal successors, (74), 10 states have internal predecessors, (74), 6 states have call successors, (22), 9 states have call predecessors, (22), 5 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2023-11-21 22:24:38,298 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 237 transitions. [2023-11-21 22:24:38,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2023-11-21 22:24:38,300 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:38,300 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:38,329 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:24:38,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2023-11-21 22:24:38,530 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:38,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:38,531 INFO L85 PathProgramCache]: Analyzing trace with hash 677156902, now seen corresponding path program 1 times [2023-11-21 22:24:38,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:38,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116768676] [2023-11-21 22:24:38,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:38,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:38,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:24:39,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:24:39,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:39,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:39,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:24:39,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:24:39,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:24:39,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:39,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:39,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-21 22:24:39,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,372 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 7 proven. 14 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-21 22:24:39,373 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:39,373 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116768676] [2023-11-21 22:24:39,373 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116768676] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:24:39,373 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [827876475] [2023-11-21 22:24:39,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:39,374 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:39,374 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:39,375 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:24:39,383 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:24:39,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:39,478 INFO L262 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 21 conjunts are in the unsatisfiable core [2023-11-21 22:24:39,482 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:24:39,847 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 21 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:24:39,847 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:24:40,347 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 12 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-21 22:24:40,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [827876475] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:24:40,348 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:24:40,348 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 12, 13] total 33 [2023-11-21 22:24:40,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1772862129] [2023-11-21 22:24:40,349 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:24:40,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-11-21 22:24:40,350 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:40,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-11-21 22:24:40,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=869, Unknown=0, NotChecked=0, Total=1056 [2023-11-21 22:24:40,352 INFO L87 Difference]: Start difference. First operand 208 states and 237 transitions. Second operand has 33 states, 30 states have (on average 3.9) internal successors, (117), 28 states have internal predecessors, (117), 15 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (27), 14 states have call predecessors, (27), 14 states have call successors, (27) [2023-11-21 22:24:42,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:42,379 INFO L93 Difference]: Finished difference Result 634 states and 745 transitions. [2023-11-21 22:24:42,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-11-21 22:24:42,380 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 30 states have (on average 3.9) internal successors, (117), 28 states have internal predecessors, (117), 15 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (27), 14 states have call predecessors, (27), 14 states have call successors, (27) Word has length 76 [2023-11-21 22:24:42,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:42,383 INFO L225 Difference]: With dead ends: 634 [2023-11-21 22:24:42,383 INFO L226 Difference]: Without dead ends: 465 [2023-11-21 22:24:42,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 224 GetRequests, 159 SyntacticMatches, 4 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1089 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=717, Invalid=3189, Unknown=0, NotChecked=0, Total=3906 [2023-11-21 22:24:42,387 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 1279 mSDsluCounter, 910 mSDsCounter, 0 mSdLazyCounter, 2031 mSolverCounterSat, 818 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1281 SdHoareTripleChecker+Valid, 1060 SdHoareTripleChecker+Invalid, 2849 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 818 IncrementalHoareTripleChecker+Valid, 2031 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:42,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1281 Valid, 1060 Invalid, 2849 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [818 Valid, 2031 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2023-11-21 22:24:42,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465 states. [2023-11-21 22:24:42,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465 to 364. [2023-11-21 22:24:42,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 364 states, 238 states have (on average 1.1722689075630253) internal successors, (279), 259 states have internal predecessors, (279), 58 states have call successors, (58), 53 states have call predecessors, (58), 67 states have return successors, (75), 64 states have call predecessors, (75), 58 states have call successors, (75) [2023-11-21 22:24:42,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 364 states to 364 states and 412 transitions. [2023-11-21 22:24:42,456 INFO L78 Accepts]: Start accepts. Automaton has 364 states and 412 transitions. Word has length 76 [2023-11-21 22:24:42,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:42,457 INFO L495 AbstractCegarLoop]: Abstraction has 364 states and 412 transitions. [2023-11-21 22:24:42,457 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 30 states have (on average 3.9) internal successors, (117), 28 states have internal predecessors, (117), 15 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (27), 14 states have call predecessors, (27), 14 states have call successors, (27) [2023-11-21 22:24:42,458 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 412 transitions. [2023-11-21 22:24:42,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2023-11-21 22:24:42,466 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:24:42,466 INFO L195 NwaCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:42,498 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:24:42,688 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-21 22:24:42,689 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:24:42,689 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:24:42,689 INFO L85 PathProgramCache]: Analyzing trace with hash 1664427093, now seen corresponding path program 1 times [2023-11-21 22:24:42,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:24:42,690 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [332405827] [2023-11-21 22:24:42,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:42,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:24:42,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:42,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:24:42,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:42,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:24:42,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:42,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:42,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:42,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:42,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:42,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:24:42,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-21 22:24:43,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:43,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:24:43,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-21 22:24:43,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-21 22:24:43,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:43,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:43,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:24:43,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2023-11-21 22:24:43,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2023-11-21 22:24:43,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:24:43,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:24:43,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2023-11-21 22:24:43,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,190 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 69 proven. 22 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2023-11-21 22:24:43,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:24:43,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [332405827] [2023-11-21 22:24:43,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [332405827] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:24:43,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1335648265] [2023-11-21 22:24:43,192 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:24:43,192 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:43,192 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:43,193 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:24:43,227 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-21 22:24:43,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:24:43,348 INFO L262 TraceCheckSpWp]: Trace formula consists of 465 conjuncts, 34 conjunts are in the unsatisfiable core [2023-11-21 22:24:43,355 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:24:44,126 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 93 proven. 42 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2023-11-21 22:24:44,127 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:24:45,291 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 76 proven. 27 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2023-11-21 22:24:45,292 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1335648265] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:24:45,292 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:24:45,292 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 34 [2023-11-21 22:24:45,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783918391] [2023-11-21 22:24:45,293 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:24:45,294 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2023-11-21 22:24:45,294 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:24:45,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2023-11-21 22:24:45,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=974, Unknown=0, NotChecked=0, Total=1122 [2023-11-21 22:24:45,297 INFO L87 Difference]: Start difference. First operand 364 states and 412 transitions. Second operand has 34 states, 32 states have (on average 5.40625) internal successors, (173), 29 states have internal predecessors, (173), 16 states have call successors, (44), 9 states have call predecessors, (44), 12 states have return successors, (44), 18 states have call predecessors, (44), 16 states have call successors, (44) [2023-11-21 22:24:48,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:24:48,529 INFO L93 Difference]: Finished difference Result 667 states and 765 transitions. [2023-11-21 22:24:48,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2023-11-21 22:24:48,530 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 32 states have (on average 5.40625) internal successors, (173), 29 states have internal predecessors, (173), 16 states have call successors, (44), 9 states have call predecessors, (44), 12 states have return successors, (44), 18 states have call predecessors, (44), 16 states have call successors, (44) Word has length 133 [2023-11-21 22:24:48,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:24:48,531 INFO L225 Difference]: With dead ends: 667 [2023-11-21 22:24:48,531 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:24:48,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 394 GetRequests, 303 SyntacticMatches, 2 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1886 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=1295, Invalid=6895, Unknown=0, NotChecked=0, Total=8190 [2023-11-21 22:24:48,537 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 773 mSDsluCounter, 736 mSDsCounter, 0 mSdLazyCounter, 1966 mSolverCounterSat, 479 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 773 SdHoareTripleChecker+Valid, 821 SdHoareTripleChecker+Invalid, 2445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 479 IncrementalHoareTripleChecker+Valid, 1966 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:24:48,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [773 Valid, 821 Invalid, 2445 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [479 Valid, 1966 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2023-11-21 22:24:48,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:24:48,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:24:48,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:24:48,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:24:48,540 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 133 [2023-11-21 22:24:48,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:24:48,540 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:24:48,540 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 32 states have (on average 5.40625) internal successors, (173), 29 states have internal predecessors, (173), 16 states have call successors, (44), 9 states have call predecessors, (44), 12 states have return successors, (44), 18 states have call predecessors, (44), 16 states have call successors, (44) [2023-11-21 22:24:48,541 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:24:48,541 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:24:48,543 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:24:48,576 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-21 22:24:48,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:24:48,767 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:24:52,177 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2023-11-21 22:24:52,177 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 758 765) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< |old(~pumpRunning~0)| 1) (= 0 ~systemActive~0)) [2023-11-21 22:24:52,178 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2023-11-21 22:24:52,178 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2023-11-21 22:24:52,178 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 896 907) the Hoare annotation is: (let ((.cse6 (= |old(~methaneLevelCritical~0)| 0)) (.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse8 (< ~pumpRunning~0 1)) (.cse7 (not .cse3)) (.cse1 (not .cse6)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse9 (not (= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse7 .cse4 .cse5) (or .cse8 .cse1 .cse3 .cse9 .cse4) (or .cse2 .cse9 .cse6 .cse7 .cse4 .cse5) (or .cse8 .cse9 .cse6 .cse7 .cse4) (or .cse1 .cse2 .cse3 .cse9 .cse4 .cse5)))) [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 908 916) the Hoare annotation is: true [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2023-11-21 22:24:52,184 INFO L899 garLoopResultBuilder]: For program point L176-1(lines 168 196) no Hoare annotation was computed. [2023-11-21 22:24:52,185 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~waterLevel~0 1)) .cse2 (< |old(~pumpRunning~0)| 1) .cse3) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2023-11-21 22:24:52,185 INFO L899 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2023-11-21 22:24:52,185 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2023-11-21 22:24:52,185 INFO L899 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2023-11-21 22:24:52,189 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= |timeShift_processEnvironment_~tmp~8#1| 0) (not (= ~methaneLevelCritical~0 0)) .cse2 .cse4 .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~waterLevel~0 1)) .cse2 .cse4 .cse3) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2023-11-21 22:24:52,190 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (= ~methaneLevelCritical~0 0)) .cse2 .cse4 .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~waterLevel~0 1)) .cse2 .cse4 .cse3) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2023-11-21 22:24:52,190 INFO L899 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2023-11-21 22:24:52,190 INFO L895 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse1) .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4) (or (and .cse0 .cse1) .cse5 (< |old(~pumpRunning~0)| 1) .cse4) (or .cse2 .cse3 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (= 2 ~waterLevel~0)) .cse5 .cse4))) [2023-11-21 22:24:52,190 INFO L899 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2023-11-21 22:24:52,191 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 641 664) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse0 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (or .cse3 .cse4 (and .cse5 .cse6 .cse2) .cse0 .cse1) (or .cse3 (and .cse5 .cse6 (= ~waterLevel~0 1)) .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-21 22:24:52,191 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= 2 ~waterLevel~0)) .cse4 .cse5) (or .cse0 (and .cse2 .cse3 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1)) .cse5) (or .cse4 (< |old(~pumpRunning~0)| 1) .cse5))) [2023-11-21 22:24:52,191 INFO L899 garLoopResultBuilder]: For program point L744-1(lines 725 749) no Hoare annotation was computed. [2023-11-21 22:24:52,191 INFO L899 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2023-11-21 22:24:52,192 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2023-11-21 22:24:52,192 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2023-11-21 22:24:52,192 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-11-21 22:24:52,192 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-11-21 22:24:52,192 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-11-21 22:24:52,193 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-11-21 22:24:52,193 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-11-21 22:24:52,193 INFO L899 garLoopResultBuilder]: For program point L77(lines 52 81) no Hoare annotation was computed. [2023-11-21 22:24:52,193 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-11-21 22:24:52,193 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-11-21 22:24:52,193 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-11-21 22:24:52,194 INFO L899 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2023-11-21 22:24:52,194 INFO L895 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse5 .cse0 .cse1 .cse2 .cse3))) [2023-11-21 22:24:52,194 INFO L899 garLoopResultBuilder]: For program point L626(lines 565 630) no Hoare annotation was computed. [2023-11-21 22:24:52,194 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2023-11-21 22:24:52,194 INFO L899 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2023-11-21 22:24:52,195 INFO L895 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2023-11-21 22:24:52,195 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:24:52,195 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2023-11-21 22:24:52,195 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2023-11-21 22:24:52,195 INFO L895 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2023-11-21 22:24:52,196 INFO L895 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2023-11-21 22:24:52,196 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:24:52,196 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2023-11-21 22:24:52,196 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2023-11-21 22:24:52,196 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse5 .cse0 .cse1 .cse2 .cse3))) [2023-11-21 22:24:52,197 INFO L895 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-11-21 22:24:52,197 INFO L899 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2023-11-21 22:24:52,197 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3))) [2023-11-21 22:24:52,197 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2023-11-21 22:24:52,198 INFO L895 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2023-11-21 22:24:52,198 INFO L899 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2023-11-21 22:24:52,198 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2023-11-21 22:24:52,198 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2023-11-21 22:24:52,198 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 884 895) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1) (not (= ~methAndRunningLastTime~0 0))) (or (< ~pumpRunning~0 1) (= 2 ~waterLevel~0) (not (= |old(~waterLevel~0)| 2)) .cse0))) [2023-11-21 22:24:52,199 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< |old(~pumpRunning~0)| 1) .cse3) (or .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3 .cse4))) [2023-11-21 22:24:52,199 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse3 (not (= ~waterLevel~0 1))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse3 .cse0 .cse1 .cse2) (or .cse3 (< |old(~pumpRunning~0)| 1) .cse1))) [2023-11-21 22:24:52,199 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse3 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~7#1|)) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse3 .cse0 .cse1 .cse2))) [2023-11-21 22:24:52,199 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2023-11-21 22:24:52,200 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2023-11-21 22:24:52,200 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2023-11-21 22:24:52,200 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (< |old(~pumpRunning~0)| 1) .cse3) (or .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3 .cse4))) [2023-11-21 22:24:52,200 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2023-11-21 22:24:52,203 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:24:52,206 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:24:52,221 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:24:52 BoogieIcfgContainer [2023-11-21 22:24:52,221 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:24:52,222 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:24:52,222 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:24:52,222 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:24:52,223 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:24:33" (3/4) ... [2023-11-21 22:24:52,225 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:24:52,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:24:52,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:24:52,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:24:52,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-21 22:24:52,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:24:52,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:24:52,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:24:52,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:24:52,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:24:52,240 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2023-11-21 22:24:52,241 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-21 22:24:52,242 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:24:52,243 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:24:52,244 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:24:52,275 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-21 22:24:52,318 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-21 22:24:52,373 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:24:52,373 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:24:52,374 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:24:52,374 INFO L158 Benchmark]: Toolchain (without parser) took 20573.33ms. Allocated memory was 159.4MB in the beginning and 297.8MB in the end (delta: 138.4MB). Free memory was 115.8MB in the beginning and 239.0MB in the end (delta: -123.1MB). Peak memory consumption was 18.1MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,375 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 159.4MB. Free memory was 103.8MB in the beginning and 103.6MB in the end (delta: 132.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:24:52,375 INFO L158 Benchmark]: CACSL2BoogieTranslator took 525.73ms. Allocated memory is still 159.4MB. Free memory was 115.5MB in the beginning and 95.3MB in the end (delta: 20.2MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,376 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.18ms. Allocated memory is still 159.4MB. Free memory was 95.3MB in the beginning and 92.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,376 INFO L158 Benchmark]: Boogie Preprocessor took 50.52ms. Allocated memory is still 159.4MB. Free memory was 92.8MB in the beginning and 90.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,377 INFO L158 Benchmark]: RCFGBuilder took 821.05ms. Allocated memory was 159.4MB in the beginning and 205.5MB in the end (delta: 46.1MB). Free memory was 90.7MB in the beginning and 168.9MB in the end (delta: -78.2MB). Peak memory consumption was 35.8MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,377 INFO L158 Benchmark]: TraceAbstraction took 18959.47ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 168.9MB in the beginning and 247.4MB in the end (delta: -78.5MB). Peak memory consumption was 175.4MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,378 INFO L158 Benchmark]: Witness Printer took 151.71ms. Allocated memory is still 297.8MB. Free memory was 247.4MB in the beginning and 239.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-21 22:24:52,380 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 159.4MB. Free memory was 103.8MB in the beginning and 103.6MB in the end (delta: 132.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 525.73ms. Allocated memory is still 159.4MB. Free memory was 115.5MB in the beginning and 95.3MB in the end (delta: 20.2MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.18ms. Allocated memory is still 159.4MB. Free memory was 95.3MB in the beginning and 92.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.52ms. Allocated memory is still 159.4MB. Free memory was 92.8MB in the beginning and 90.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 821.05ms. Allocated memory was 159.4MB in the beginning and 205.5MB in the end (delta: 46.1MB). Free memory was 90.7MB in the beginning and 168.9MB in the end (delta: -78.2MB). Peak memory consumption was 35.8MB. Max. memory is 16.1GB. * TraceAbstraction took 18959.47ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 168.9MB in the beginning and 247.4MB in the end (delta: -78.5MB). Peak memory consumption was 175.4MB. Max. memory is 16.1GB. * Witness Printer took 151.71ms. Allocated memory is still 297.8MB. Free memory was 247.4MB in the beginning and 239.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 155]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [155] - GenericResultAtLocation [Line: 197]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [197] - GenericResultAtLocation [Line: 563]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [563] - GenericResultAtLocation [Line: 631]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [631] - GenericResultAtLocation [Line: 868]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [868] - GenericResultAtLocation [Line: 972]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [972] - GenericResultAtLocation [Line: 1007]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1007] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.9s, OverallIterations: 10, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2742 SdHoareTripleChecker+Valid, 3.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2715 mSDsluCounter, 3026 SdHoareTripleChecker+Invalid, 3.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2322 mSDsCounter, 1587 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4995 IncrementalHoareTripleChecker+Invalid, 6582 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1587 mSolverCounterUnsat, 704 mSDtfsCounter, 4995 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 954 GetRequests, 748 SyntacticMatches, 10 SemanticMatches, 196 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3049 ImplicationChecksByTransitivity, 3.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=364occurred in iteration=9, InterpolantAutomatonStates: 143, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 159 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 670 PreInvPairs, 702 NumberOfFragments, 1071 HoareAnnotationTreeSize, 670 FomulaSimplifications, 3011 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 27 FomulaSimplificationsInter, 5196 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.8s InterpolantComputationTime, 848 NumberOfCodeBlocks, 848 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1113 ConstructedInterpolants, 0 QuantifiedInterpolants, 3054 SizeOfPredicates, 20 NumberOfNonLiveVariables, 1344 ConjunctsInSsa, 68 ConjunctsInUnsatCore, 17 InterpolantComputations, 7 PerfectInterpolantSequences, 582/714 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning) && (2 == waterLevel)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: (((((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-11-21 22:24:52,423 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f874a029-cdfa-4e8a-8dc5-706b4859b70b/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE