./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:20:14,774 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:20:14,903 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:20:14,912 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:20:14,913 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:20:14,953 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:20:14,954 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:20:14,955 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:20:14,956 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:20:14,961 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:20:14,961 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:20:14,962 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:20:14,962 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:20:14,964 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:20:14,965 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:20:14,965 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:20:14,966 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:20:14,966 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:20:14,967 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:20:14,967 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:20:14,967 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:20:14,968 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:20:14,968 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:20:14,969 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:20:14,969 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:20:14,970 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:20:14,970 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:20:14,971 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:20:14,971 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:20:14,972 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:20:14,973 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:20:14,973 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:20:14,974 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:20:14,974 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:20:14,974 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:20:14,974 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:20:14,975 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:20:14,975 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:20:14,975 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:20:14,975 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:20:14,976 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:20:14,976 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:20:14,976 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb [2023-11-21 22:20:15,296 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:20:15,339 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:20:15,341 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:20:15,343 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:20:15,343 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:20:15,344 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2023-11-21 22:20:18,395 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:20:18,656 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:20:18,657 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2023-11-21 22:20:18,675 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/data/5f5860370/1bfab4afde4d401793a5209fd26cd3af/FLAGfbb17f071 [2023-11-21 22:20:18,694 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/data/5f5860370/1bfab4afde4d401793a5209fd26cd3af [2023-11-21 22:20:18,696 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:20:18,698 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:20:18,700 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:20:18,700 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:20:18,711 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:20:18,712 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:20:18" (1/1) ... [2023-11-21 22:20:18,713 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39d80db2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:18, skipping insertion in model container [2023-11-21 22:20:18,713 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:20:18" (1/1) ... [2023-11-21 22:20:18,766 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:20:19,065 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2023-11-21 22:20:19,082 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:20:19,094 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:20:19,105 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-21 22:20:19,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [87] [2023-11-21 22:20:19,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [159] [2023-11-21 22:20:19,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [354] [2023-11-21 22:20:19,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [720] [2023-11-21 22:20:19,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [729] [2023-11-21 22:20:19,108 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [825] [2023-11-21 22:20:19,109 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [920] [2023-11-21 22:20:19,177 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2023-11-21 22:20:19,187 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:20:19,208 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:20:19,208 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19 WrapperNode [2023-11-21 22:20:19,209 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:20:19,210 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:20:19,210 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:20:19,210 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:20:19,219 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,249 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,295 INFO L138 Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 201 [2023-11-21 22:20:19,296 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:20:19,296 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:20:19,297 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:20:19,297 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:20:19,309 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,309 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,325 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,343 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:20:19,364 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,364 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,369 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,374 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,376 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,377 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,386 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:20:19,387 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:20:19,388 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:20:19,388 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:20:19,389 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (1/1) ... [2023-11-21 22:20:19,396 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:20:19,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:19,425 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:20:19,444 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:20:19,466 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:20:19,466 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:20:19,467 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:20:19,467 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-21 22:20:19,467 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-21 22:20:19,467 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:20:19,467 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:20:19,467 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:20:19,468 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:20:19,468 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:20:19,468 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:20:19,468 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:20:19,469 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:20:19,469 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:20:19,469 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:20:19,469 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:20:19,469 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:20:19,470 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:20:19,575 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:20:19,578 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:20:19,905 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:20:20,040 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:20:20,040 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:20:20,042 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:20 BoogieIcfgContainer [2023-11-21 22:20:20,042 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:20:20,045 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:20:20,045 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:20:20,049 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:20:20,049 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:20:18" (1/3) ... [2023-11-21 22:20:20,050 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@57ea1125 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:20:20, skipping insertion in model container [2023-11-21 22:20:20,050 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:20:19" (2/3) ... [2023-11-21 22:20:20,051 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@57ea1125 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:20:20, skipping insertion in model container [2023-11-21 22:20:20,051 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:20" (3/3) ... [2023-11-21 22:20:20,052 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product38.cil.c [2023-11-21 22:20:20,075 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:20:20,075 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:20:20,125 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:20:20,133 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7f628884, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:20:20,133 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:20:20,138 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-21 22:20:20,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-21 22:20:20,149 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:20,149 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:20,150 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:20,156 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:20,156 INFO L85 PathProgramCache]: Analyzing trace with hash -1977299680, now seen corresponding path program 1 times [2023-11-21 22:20:20,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:20,167 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558698702] [2023-11-21 22:20:20,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:20,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:20,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:20,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-21 22:20:20,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:20,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:20,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:20,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558698702] [2023-11-21 22:20:20,349 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558698702] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:20,349 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:20,349 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:20:20,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1611346728] [2023-11-21 22:20:20,352 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:20,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:20:20,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:20,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:20:20,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:20:20,391 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:20,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:20,493 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2023-11-21 22:20:20,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:20:20,496 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-21 22:20:20,496 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:20,506 INFO L225 Difference]: With dead ends: 114 [2023-11-21 22:20:20,506 INFO L226 Difference]: Without dead ends: 53 [2023-11-21 22:20:20,512 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:20:20,519 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:20,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 56 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:20,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-21 22:20:20,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-21 22:20:20,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-21 22:20:20,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2023-11-21 22:20:20,577 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 17 [2023-11-21 22:20:20,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:20,578 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2023-11-21 22:20:20,578 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:20,578 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2023-11-21 22:20:20,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-21 22:20:20,583 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:20,583 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:20,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:20:20,585 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:20,586 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:20,587 INFO L85 PathProgramCache]: Analyzing trace with hash -1588984146, now seen corresponding path program 1 times [2023-11-21 22:20:20,587 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:20,588 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [803692529] [2023-11-21 22:20:20,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:20,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:20,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:20,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:20:20,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:20,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:20,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:20,755 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [803692529] [2023-11-21 22:20:20,755 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [803692529] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:20,755 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:20,756 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:20:20,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144321542] [2023-11-21 22:20:20,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:20,757 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:20:20,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:20,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:20:20,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:20,759 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:20,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:20,842 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2023-11-21 22:20:20,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:20:20,843 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-21 22:20:20,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:20,844 INFO L225 Difference]: With dead ends: 83 [2023-11-21 22:20:20,844 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:20:20,845 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:20:20,847 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 7 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:20,848 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 75 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:20,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:20:20,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:20:20,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:20:20,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2023-11-21 22:20:20,857 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 18 [2023-11-21 22:20:20,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:20,858 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2023-11-21 22:20:20,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:20,859 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2023-11-21 22:20:20,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-21 22:20:20,860 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:20,860 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:20,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:20:20,861 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:20,861 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:20,862 INFO L85 PathProgramCache]: Analyzing trace with hash -1520409563, now seen corresponding path program 1 times [2023-11-21 22:20:20,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:20,862 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [393640361] [2023-11-21 22:20:20,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:20,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:20,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:21,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:21,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:21,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:21,029 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:21,029 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [393640361] [2023-11-21 22:20:21,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [393640361] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:21,030 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:21,030 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:20:21,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787754341] [2023-11-21 22:20:21,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:21,031 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:20:21,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:21,032 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:20:21,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:20:21,032 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:21,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:21,116 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2023-11-21 22:20:21,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:20:21,117 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-21 22:20:21,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:21,118 INFO L225 Difference]: With dead ends: 88 [2023-11-21 22:20:21,119 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:20:21,120 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:20:21,121 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 47 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:21,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 53 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:20:21,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:20:21,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:20:21,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 36 states have internal predecessors, (38), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:20:21,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 56 transitions. [2023-11-21 22:20:21,132 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 56 transitions. Word has length 20 [2023-11-21 22:20:21,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:21,132 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 56 transitions. [2023-11-21 22:20:21,133 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:20:21,133 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 56 transitions. [2023-11-21 22:20:21,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2023-11-21 22:20:21,134 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:21,135 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:21,135 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:20:21,135 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:21,136 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:21,136 INFO L85 PathProgramCache]: Analyzing trace with hash 1599190365, now seen corresponding path program 1 times [2023-11-21 22:20:21,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:21,136 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415949956] [2023-11-21 22:20:21,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:21,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:21,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:21,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:21,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:21,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-21 22:20:21,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:21,393 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:20:21,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:21,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415949956] [2023-11-21 22:20:21,393 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415949956] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:21,394 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:21,394 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:20:21,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [315105293] [2023-11-21 22:20:21,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:21,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:20:21,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:21,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:20:21,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:20:21,396 INFO L87 Difference]: Start difference. First operand 45 states and 56 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:21,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:21,870 INFO L93 Difference]: Finished difference Result 228 states and 295 transitions. [2023-11-21 22:20:21,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-21 22:20:21,871 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2023-11-21 22:20:21,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:21,879 INFO L225 Difference]: With dead ends: 228 [2023-11-21 22:20:21,880 INFO L226 Difference]: Without dead ends: 185 [2023-11-21 22:20:21,884 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:20:21,889 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 142 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:21,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 272 Invalid, 229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:20:21,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2023-11-21 22:20:21,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 161. [2023-11-21 22:20:21,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 161 states, 108 states have (on average 1.2962962962962963) internal successors, (140), 122 states have internal predecessors, (140), 27 states have call successors, (27), 23 states have call predecessors, (27), 25 states have return successors, (36), 26 states have call predecessors, (36), 27 states have call successors, (36) [2023-11-21 22:20:21,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 203 transitions. [2023-11-21 22:20:21,933 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 203 transitions. Word has length 27 [2023-11-21 22:20:21,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:21,934 INFO L495 AbstractCegarLoop]: Abstraction has 161 states and 203 transitions. [2023-11-21 22:20:21,934 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:20:21,934 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 203 transitions. [2023-11-21 22:20:21,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-21 22:20:21,937 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:21,937 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:21,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:20:21,938 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:21,938 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:21,938 INFO L85 PathProgramCache]: Analyzing trace with hash -1902197692, now seen corresponding path program 1 times [2023-11-21 22:20:21,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:21,939 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208190510] [2023-11-21 22:20:21,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:21,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:21,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:22,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-21 22:20:22,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:22,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:22,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208190510] [2023-11-21 22:20:22,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208190510] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:22,035 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:22,036 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:20:22,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281109190] [2023-11-21 22:20:22,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:22,037 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:20:22,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:22,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:20:22,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:20:22,038 INFO L87 Difference]: Start difference. First operand 161 states and 203 transitions. Second operand has 5 states, 5 states have (on average 4.6) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:20:22,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:22,267 INFO L93 Difference]: Finished difference Result 399 states and 521 transitions. [2023-11-21 22:20:22,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-21 22:20:22,268 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2023-11-21 22:20:22,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:22,272 INFO L225 Difference]: With dead ends: 399 [2023-11-21 22:20:22,272 INFO L226 Difference]: Without dead ends: 289 [2023-11-21 22:20:22,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:20:22,276 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 57 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:22,276 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 165 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:20:22,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2023-11-21 22:20:22,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 271. [2023-11-21 22:20:22,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 184 states have (on average 1.2554347826086956) internal successors, (231), 201 states have internal predecessors, (231), 44 states have call successors, (44), 34 states have call predecessors, (44), 42 states have return successors, (64), 45 states have call predecessors, (64), 44 states have call successors, (64) [2023-11-21 22:20:22,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 339 transitions. [2023-11-21 22:20:22,361 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 339 transitions. Word has length 28 [2023-11-21 22:20:22,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:22,363 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 339 transitions. [2023-11-21 22:20:22,363 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:20:22,364 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 339 transitions. [2023-11-21 22:20:22,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-21 22:20:22,372 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:22,372 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:22,373 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:20:22,378 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:22,378 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:22,379 INFO L85 PathProgramCache]: Analyzing trace with hash 1727911802, now seen corresponding path program 1 times [2023-11-21 22:20:22,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:22,379 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711278340] [2023-11-21 22:20:22,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:22,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:22,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:20:22,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:20:22,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-21 22:20:22,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:22,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:22,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:22,588 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711278340] [2023-11-21 22:20:22,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711278340] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:22,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:22,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:20:22,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1696025280] [2023-11-21 22:20:22,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:22,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:20:22,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:22,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:20:22,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:20:22,591 INFO L87 Difference]: Start difference. First operand 271 states and 339 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-21 22:20:22,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:22,910 INFO L93 Difference]: Finished difference Result 780 states and 994 transitions. [2023-11-21 22:20:22,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:20:22,911 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2023-11-21 22:20:22,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:22,916 INFO L225 Difference]: With dead ends: 780 [2023-11-21 22:20:22,917 INFO L226 Difference]: Without dead ends: 511 [2023-11-21 22:20:22,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:20:22,919 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 107 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 196 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 196 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:22,920 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 184 Invalid, 239 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 196 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:20:22,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2023-11-21 22:20:22,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 481. [2023-11-21 22:20:22,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 328 states have (on average 1.2317073170731707) internal successors, (404), 354 states have internal predecessors, (404), 78 states have call successors, (78), 61 states have call predecessors, (78), 74 states have return successors, (125), 80 states have call predecessors, (125), 78 states have call successors, (125) [2023-11-21 22:20:22,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 607 transitions. [2023-11-21 22:20:22,988 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 607 transitions. Word has length 31 [2023-11-21 22:20:22,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:22,989 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 607 transitions. [2023-11-21 22:20:22,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-21 22:20:22,989 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 607 transitions. [2023-11-21 22:20:22,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-21 22:20:22,991 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:22,991 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:22,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:20:22,992 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:22,992 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:22,992 INFO L85 PathProgramCache]: Analyzing trace with hash -1308523125, now seen corresponding path program 1 times [2023-11-21 22:20:22,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:22,993 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1955761850] [2023-11-21 22:20:22,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:22,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:23,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:20:23,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:20:23,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:20:23,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-21 22:20:23,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:20:23,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:23,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1955761850] [2023-11-21 22:20:23,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1955761850] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:20:23,276 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:20:23,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:20:23,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [653857904] [2023-11-21 22:20:23,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:20:23,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:20:23,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:23,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:20:23,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:20:23,279 INFO L87 Difference]: Start difference. First operand 481 states and 607 transitions. Second operand has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:20:23,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:23,664 INFO L93 Difference]: Finished difference Result 1272 states and 1624 transitions. [2023-11-21 22:20:23,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-21 22:20:23,665 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 34 [2023-11-21 22:20:23,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:23,674 INFO L225 Difference]: With dead ends: 1272 [2023-11-21 22:20:23,674 INFO L226 Difference]: Without dead ends: 840 [2023-11-21 22:20:23,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=148, Unknown=0, NotChecked=0, Total=210 [2023-11-21 22:20:23,679 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 119 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:23,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 141 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:20:23,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2023-11-21 22:20:23,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 815. [2023-11-21 22:20:23,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 815 states, 560 states have (on average 1.225) internal successors, (686), 601 states have internal predecessors, (686), 132 states have call successors, (132), 103 states have call predecessors, (132), 122 states have return successors, (217), 134 states have call predecessors, (217), 132 states have call successors, (217) [2023-11-21 22:20:23,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 815 states to 815 states and 1035 transitions. [2023-11-21 22:20:23,819 INFO L78 Accepts]: Start accepts. Automaton has 815 states and 1035 transitions. Word has length 34 [2023-11-21 22:20:23,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:23,819 INFO L495 AbstractCegarLoop]: Abstraction has 815 states and 1035 transitions. [2023-11-21 22:20:23,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:20:23,820 INFO L276 IsEmpty]: Start isEmpty. Operand 815 states and 1035 transitions. [2023-11-21 22:20:23,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-21 22:20:23,822 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:20:23,823 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:23,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:20:23,823 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:20:23,824 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:20:23,824 INFO L85 PathProgramCache]: Analyzing trace with hash 293581659, now seen corresponding path program 1 times [2023-11-21 22:20:23,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:20:23,824 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2142577346] [2023-11-21 22:20:23,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:23,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:20:23,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:20:23,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:23,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:20:24,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:20:24,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-21 22:20:24,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-21 22:20:24,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:20:24,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,043 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:20:24,044 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:20:24,044 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2142577346] [2023-11-21 22:20:24,044 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2142577346] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:20:24,044 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2062608054] [2023-11-21 22:20:24,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:20:24,045 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:24,045 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:20:24,047 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:20:24,077 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:20:24,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:20:24,173 INFO L262 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 23 conjunts are in the unsatisfiable core [2023-11-21 22:20:24,195 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:20:24,614 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-21 22:20:24,614 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:20:25,041 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-21 22:20:25,042 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2062608054] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:20:25,042 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:20:25,042 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 22 [2023-11-21 22:20:25,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1083596895] [2023-11-21 22:20:25,043 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:20:25,044 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-21 22:20:25,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:20:25,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-21 22:20:25,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=390, Unknown=0, NotChecked=0, Total=462 [2023-11-21 22:20:25,046 INFO L87 Difference]: Start difference. First operand 815 states and 1035 transitions. Second operand has 22 states, 20 states have (on average 5.05) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (21), 9 states have call predecessors, (21), 7 states have return successors, (18), 10 states have call predecessors, (18), 7 states have call successors, (18) [2023-11-21 22:20:29,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:20:29,871 INFO L93 Difference]: Finished difference Result 3621 states and 5201 transitions. [2023-11-21 22:20:29,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 114 states. [2023-11-21 22:20:29,872 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 5.05) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (21), 9 states have call predecessors, (21), 7 states have return successors, (18), 10 states have call predecessors, (18), 7 states have call successors, (18) Word has length 55 [2023-11-21 22:20:29,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:20:29,875 INFO L225 Difference]: With dead ends: 3621 [2023-11-21 22:20:29,875 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:20:29,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 272 GetRequests, 143 SyntacticMatches, 1 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5965 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=2501, Invalid=14269, Unknown=0, NotChecked=0, Total=16770 [2023-11-21 22:20:29,898 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 814 mSDsluCounter, 855 mSDsCounter, 0 mSdLazyCounter, 2309 mSolverCounterSat, 508 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 818 SdHoareTripleChecker+Valid, 966 SdHoareTripleChecker+Invalid, 2817 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 508 IncrementalHoareTripleChecker+Valid, 2309 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2023-11-21 22:20:29,899 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [818 Valid, 966 Invalid, 2817 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [508 Valid, 2309 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2023-11-21 22:20:29,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:20:29,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:20:29,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:20:29,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:20:29,902 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 55 [2023-11-21 22:20:29,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:20:29,903 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:20:29,903 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 5.05) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (21), 9 states have call predecessors, (21), 7 states have return successors, (18), 10 states have call predecessors, (18), 7 states have call successors, (18) [2023-11-21 22:20:29,903 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:20:29,903 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:20:29,906 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:20:29,927 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-21 22:20:30,115 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:20:30,117 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:20:38,017 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 196 202) no Hoare annotation was computed. [2023-11-21 22:20:38,017 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 196 202) the Hoare annotation is: true [2023-11-21 22:20:38,018 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 853 864) the Hoare annotation is: (or (< 2 ~waterLevel~0) (= |old(~methaneLevelCritical~0)| 0) (not (= ~methaneLevelCritical~0 0)) (= 0 ~systemActive~0)) [2023-11-21 22:20:38,018 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 853 864) no Hoare annotation was computed. [2023-11-21 22:20:38,018 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 865 873) the Hoare annotation is: true [2023-11-21 22:20:38,018 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 865 873) no Hoare annotation was computed. [2023-11-21 22:20:38,019 INFO L902 garLoopResultBuilder]: At program point L737(line 737) the Hoare annotation is: true [2023-11-21 22:20:38,019 INFO L899 garLoopResultBuilder]: For program point L737-1(line 737) no Hoare annotation was computed. [2023-11-21 22:20:38,019 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 731 760) no Hoare annotation was computed. [2023-11-21 22:20:38,019 INFO L899 garLoopResultBuilder]: For program point L756(lines 731 760) no Hoare annotation was computed. [2023-11-21 22:20:38,019 INFO L899 garLoopResultBuilder]: For program point L752(line 752) no Hoare annotation was computed. [2023-11-21 22:20:38,019 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 731 760) the Hoare annotation is: true [2023-11-21 22:20:38,020 INFO L899 garLoopResultBuilder]: For program point L745(lines 745 749) no Hoare annotation was computed. [2023-11-21 22:20:38,020 INFO L902 garLoopResultBuilder]: At program point L745-1(lines 745 749) the Hoare annotation is: true [2023-11-21 22:20:38,020 INFO L902 garLoopResultBuilder]: At program point L741-2(lines 741 755) the Hoare annotation is: true [2023-11-21 22:20:38,020 INFO L899 garLoopResultBuilder]: For program point L725(line 725) no Hoare annotation was computed. [2023-11-21 22:20:38,020 INFO L899 garLoopResultBuilder]: For program point L176-1(lines 175 194) no Hoare annotation was computed. [2023-11-21 22:20:38,020 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 246) no Hoare annotation was computed. [2023-11-21 22:20:38,021 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2023-11-21 22:20:38,021 INFO L899 garLoopResultBuilder]: For program point L234(lines 234 251) no Hoare annotation was computed. [2023-11-21 22:20:38,021 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2023-11-21 22:20:38,021 INFO L899 garLoopResultBuilder]: For program point L936-1(lines 921 953) no Hoare annotation was computed. [2023-11-21 22:20:38,022 INFO L895 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 1))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse9 (and (= 2 ~waterLevel~0) .cse8)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (< ~waterLevel~0 1)) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (< 1 |old(~waterLevel~0)|) (and .cse4 (or .cse5 .cse6) .cse7) (<= ~waterLevel~0 0) .cse2 (and .cse7 .cse8))) (or (and .cse4 .cse3) (and .cse5 .cse3) .cse1 .cse2 .cse9) (or .cse10 .cse1 .cse2 .cse9) (or .cse10 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse11 .cse0 .cse2)))) [2023-11-21 22:20:38,022 INFO L899 garLoopResultBuilder]: For program point L928-1(line 928) no Hoare annotation was computed. [2023-11-21 22:20:38,022 INFO L895 garLoopResultBuilder]: At program point L276(line 276) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 0) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (or (= |old(~waterLevel~0)| ~waterLevel~0) (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)))) .cse0 (< 2 |old(~waterLevel~0)|)))) [2023-11-21 22:20:38,022 INFO L899 garLoopResultBuilder]: For program point L276-1(line 276) no Hoare annotation was computed. [2023-11-21 22:20:38,023 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 0) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (or (= |old(~waterLevel~0)| ~waterLevel~0) (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)))) .cse0 (< 2 |old(~waterLevel~0)|)))) [2023-11-21 22:20:38,023 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 172 195) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (and .cse0 (= 2 ~waterLevel~0)) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-21 22:20:38,023 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 950) no Hoare annotation was computed. [2023-11-21 22:20:38,024 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or .cse0 (< ~waterLevel~0 1)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (not (= |old(~waterLevel~0)| 2)) (and .cse0 (= 2 ~waterLevel~0) (= |old(~pumpRunning~0)| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 1)) (<= 1 |old(~waterLevel~0)|) .cse1))) [2023-11-21 22:20:38,024 INFO L899 garLoopResultBuilder]: For program point L249-1(lines 230 254) no Hoare annotation was computed. [2023-11-21 22:20:38,024 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 183 189) no Hoare annotation was computed. [2023-11-21 22:20:38,024 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 172 195) no Hoare annotation was computed. [2023-11-21 22:20:38,024 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 725) no Hoare annotation was computed. [2023-11-21 22:20:38,025 INFO L895 garLoopResultBuilder]: At program point L151(lines 102 152) the Hoare annotation is: false [2023-11-21 22:20:38,025 INFO L899 garLoopResultBuilder]: For program point L812(lines 812 819) no Hoare annotation was computed. [2023-11-21 22:20:38,025 INFO L899 garLoopResultBuilder]: For program point L812-2(lines 812 819) no Hoare annotation was computed. [2023-11-21 22:20:38,025 INFO L899 garLoopResultBuilder]: For program point L123(lines 123 129) no Hoare annotation was computed. [2023-11-21 22:20:38,025 INFO L899 garLoopResultBuilder]: For program point L123-1(lines 123 129) no Hoare annotation was computed. [2023-11-21 22:20:38,026 INFO L895 garLoopResultBuilder]: At program point L148(lines 103 150) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2023-11-21 22:20:38,026 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2023-11-21 22:20:38,026 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:20:38,026 INFO L895 garLoopResultBuilder]: At program point L141-2(lines 133 146) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2)) [2023-11-21 22:20:38,026 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:20:38,027 INFO L899 garLoopResultBuilder]: For program point L104(lines 103 150) no Hoare annotation was computed. [2023-11-21 22:20:38,027 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2)) [2023-11-21 22:20:38,027 INFO L899 garLoopResultBuilder]: For program point L154(lines 93 158) no Hoare annotation was computed. [2023-11-21 22:20:38,027 INFO L899 garLoopResultBuilder]: For program point L113(lines 113 119) no Hoare annotation was computed. [2023-11-21 22:20:38,027 INFO L899 garLoopResultBuilder]: For program point L113-1(lines 113 119) no Hoare annotation was computed. [2023-11-21 22:20:38,028 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse0 (and (not (= |old(~pumpRunning~0)| 0)) (<= 1 ~waterLevel~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1) (or (and .cse2 (<= ~waterLevel~0 0)) (< 1 ~waterLevel~0) .cse0 .cse1) (or (not (= ~waterLevel~0 1)) .cse2 .cse1))) [2023-11-21 22:20:38,028 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 204 228) no Hoare annotation was computed. [2023-11-21 22:20:38,028 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 204 228) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< 1 ~waterLevel~0) .cse0) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-21 22:20:38,028 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 204 228) no Hoare annotation was computed. [2023-11-21 22:20:38,029 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse0) (or (not (= ~waterLevel~0 1)) .cse1 .cse0) (or (< 2 ~waterLevel~0) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1)) (and (not .cse1) (<= 1 ~waterLevel~0)) .cse0))) [2023-11-21 22:20:38,029 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 220) no Hoare annotation was computed. [2023-11-21 22:20:38,029 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 225) no Hoare annotation was computed. [2023-11-21 22:20:38,029 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 841 852) no Hoare annotation was computed. [2023-11-21 22:20:38,030 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 841 852) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) .cse0) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse0) (or .cse1 (not (= ~pumpRunning~0 1)) .cse2 .cse0))) [2023-11-21 22:20:38,032 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:20:38,034 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:20:38,047 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:20:38 BoogieIcfgContainer [2023-11-21 22:20:38,047 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:20:38,048 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:20:38,048 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:20:38,048 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:20:38,052 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:20:20" (3/4) ... [2023-11-21 22:20:38,054 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:20:38,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:20:38,059 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:20:38,061 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-21 22:20:38,061 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:20:38,061 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:20:38,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:20:38,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:20:38,073 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 43 nodes and edges [2023-11-21 22:20:38,076 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-21 22:20:38,077 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:20:38,077 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:20:38,078 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:20:38,107 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-21 22:20:38,144 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-21 22:20:38,198 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:20:38,198 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:20:38,199 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:20:38,199 INFO L158 Benchmark]: Toolchain (without parser) took 19501.50ms. Allocated memory was 132.1MB in the beginning and 339.7MB in the end (delta: 207.6MB). Free memory was 91.4MB in the beginning and 143.4MB in the end (delta: -52.0MB). Peak memory consumption was 158.7MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,200 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 82.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:20:38,200 INFO L158 Benchmark]: CACSL2BoogieTranslator took 509.39ms. Allocated memory is still 132.1MB. Free memory was 91.4MB in the beginning and 72.1MB in the end (delta: 19.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,201 INFO L158 Benchmark]: Boogie Procedure Inliner took 85.97ms. Allocated memory is still 132.1MB. Free memory was 71.8MB in the beginning and 69.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,201 INFO L158 Benchmark]: Boogie Preprocessor took 90.36ms. Allocated memory is still 132.1MB. Free memory was 69.7MB in the beginning and 67.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,202 INFO L158 Benchmark]: RCFGBuilder took 655.08ms. Allocated memory is still 132.1MB. Free memory was 67.3MB in the beginning and 86.4MB in the end (delta: -19.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,202 INFO L158 Benchmark]: TraceAbstraction took 18002.53ms. Allocated memory was 132.1MB in the beginning and 339.7MB in the end (delta: 207.6MB). Free memory was 85.7MB in the beginning and 150.7MB in the end (delta: -65.0MB). Peak memory consumption was 193.8MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,203 INFO L158 Benchmark]: Witness Printer took 150.90ms. Allocated memory is still 339.7MB. Free memory was 150.7MB in the beginning and 143.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-21 22:20:38,205 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 82.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 509.39ms. Allocated memory is still 132.1MB. Free memory was 91.4MB in the beginning and 72.1MB in the end (delta: 19.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 85.97ms. Allocated memory is still 132.1MB. Free memory was 71.8MB in the beginning and 69.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 90.36ms. Allocated memory is still 132.1MB. Free memory was 69.7MB in the beginning and 67.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 655.08ms. Allocated memory is still 132.1MB. Free memory was 67.3MB in the beginning and 86.4MB in the end (delta: -19.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 18002.53ms. Allocated memory was 132.1MB in the beginning and 339.7MB in the end (delta: 207.6MB). Free memory was 85.7MB in the beginning and 150.7MB in the end (delta: -65.0MB). Peak memory consumption was 193.8MB. Max. memory is 16.1GB. * Witness Printer took 150.90ms. Allocated memory is still 339.7MB. Free memory was 150.7MB in the beginning and 143.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [87] - GenericResultAtLocation [Line: 159]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [159] - GenericResultAtLocation [Line: 354]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [354] - GenericResultAtLocation [Line: 720]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [720] - GenericResultAtLocation [Line: 729]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [729] - GenericResultAtLocation [Line: 825]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [825] - GenericResultAtLocation [Line: 920]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [920] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 725]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.9s, OverallIterations: 8, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1317 SdHoareTripleChecker+Valid, 2.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1293 mSDsluCounter, 1912 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1438 mSDsCounter, 664 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3160 IncrementalHoareTripleChecker+Invalid, 3824 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 664 mSolverCounterUnsat, 474 mSDtfsCounter, 3160 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 358 GetRequests, 193 SyntacticMatches, 1 SemanticMatches, 164 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5999 ImplicationChecksByTransitivity, 3.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=815occurred in iteration=7, InterpolantAutomatonStates: 158, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 8 MinimizatonAttempts, 97 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 1603 PreInvPairs, 2246 NumberOfFragments, 577 HoareAnnotationTreeSize, 1603 FomulaSimplifications, 30267 FormulaSimplificationTreeSizeReduction, 2.3s HoareSimplificationTime, 21 FomulaSimplificationsInter, 36945 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 285 NumberOfCodeBlocks, 285 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 330 ConstructedInterpolants, 0 QuantifiedInterpolants, 936 SizeOfPredicates, 7 NumberOfNonLiveVariables, 246 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 10 InterpolantComputations, 7 PerfectInterpolantSequences, 47/65 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 103]: Loop Invariant Derived loop invariant: ((((((tmp == 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (pumpRunning == 1)) || ((((tmp == 1) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) - InvariantResult [Line: 741]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-21 22:20:38,237 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a23d43bf-4e2a-443e-897d-dc19f20ef6fe/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE