./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:25:04,943 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:25:05,056 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:25:05,063 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:25:05,064 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:25:05,106 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:25:05,107 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:25:05,108 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:25:05,109 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:25:05,114 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:25:05,115 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:25:05,115 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:25:05,116 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:25:05,118 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:25:05,118 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:25:05,119 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:25:05,119 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:25:05,120 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:25:05,120 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:25:05,121 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:25:05,121 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:25:05,122 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:25:05,123 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:25:05,123 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:25:05,124 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:25:05,124 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:25:05,125 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:25:05,126 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:25:05,126 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:25:05,127 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:25:05,128 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:25:05,128 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:25:05,129 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:25:05,129 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:25:05,130 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:25:05,130 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:25:05,130 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:25:05,130 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:25:05,131 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:25:05,131 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:25:05,131 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:25:05,132 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:25:05,132 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb [2023-11-21 22:25:05,456 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:25:05,488 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:25:05,491 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:25:05,493 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:25:05,493 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:25:05,494 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2023-11-21 22:25:08,689 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:25:09,018 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:25:09,026 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2023-11-21 22:25:09,047 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/data/dbdec29f9/aa5c6d90af314d258a9b6a338bee325d/FLAG3d5993107 [2023-11-21 22:25:09,065 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/data/dbdec29f9/aa5c6d90af314d258a9b6a338bee325d [2023-11-21 22:25:09,073 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:25:09,076 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:25:09,080 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:25:09,081 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:25:09,087 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:25:09,087 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,089 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7849feb4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09, skipping insertion in model container [2023-11-21 22:25:09,089 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,152 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:25:09,338 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2023-11-21 22:25:09,434 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:25:09,453 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:25:09,463 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-21 22:25:09,465 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [160] [2023-11-21 22:25:09,465 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [262] [2023-11-21 22:25:09,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [271] [2023-11-21 22:25:09,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [306] [2023-11-21 22:25:09,466 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [341] [2023-11-21 22:25:09,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [707] [2023-11-21 22:25:09,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [775] [2023-11-21 22:25:09,502 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2023-11-21 22:25:09,584 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:25:09,608 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:25:09,608 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09 WrapperNode [2023-11-21 22:25:09,608 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:25:09,610 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:25:09,610 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:25:09,610 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:25:09,617 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,639 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,683 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 231 [2023-11-21 22:25:09,684 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:25:09,685 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:25:09,685 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:25:09,685 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:25:09,697 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,697 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,709 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,731 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:25:09,743 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,744 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,749 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,755 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,767 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,768 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,771 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:25:09,772 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:25:09,772 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:25:09,772 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:25:09,773 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (1/1) ... [2023-11-21 22:25:09,779 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:25:09,795 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:25:09,810 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:25:09,816 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:25:09,849 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:25:09,850 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:25:09,850 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:25:09,850 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:25:09,851 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:25:09,851 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:25:09,851 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:25:09,851 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-21 22:25:09,852 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-21 22:25:09,852 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:25:09,852 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:25:09,853 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:25:09,854 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:25:09,854 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:25:09,854 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:25:09,854 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:25:09,855 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:25:09,856 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:25:09,856 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:25:09,856 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:25:09,858 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:25:09,858 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:25:09,983 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:25:09,994 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:25:10,331 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:25:10,544 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:25:10,544 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:25:10,546 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:25:10 BoogieIcfgContainer [2023-11-21 22:25:10,546 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:25:10,549 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:25:10,549 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:25:10,553 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:25:10,553 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:25:09" (1/3) ... [2023-11-21 22:25:10,554 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13ca10d5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:25:10, skipping insertion in model container [2023-11-21 22:25:10,554 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:25:09" (2/3) ... [2023-11-21 22:25:10,555 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13ca10d5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:25:10, skipping insertion in model container [2023-11-21 22:25:10,555 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:25:10" (3/3) ... [2023-11-21 22:25:10,556 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product54.cil.c [2023-11-21 22:25:10,580 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:25:10,580 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:25:10,640 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:25:10,649 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@681647ef, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:25:10,649 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:25:10,654 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-21 22:25:10,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-21 22:25:10,666 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:10,669 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:10,670 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:10,676 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:10,677 INFO L85 PathProgramCache]: Analyzing trace with hash 1150430532, now seen corresponding path program 1 times [2023-11-21 22:25:10,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:10,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906072506] [2023-11-21 22:25:10,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:10,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:10,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:10,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-21 22:25:10,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:10,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:10,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:10,920 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906072506] [2023-11-21 22:25:10,921 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906072506] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:10,921 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:10,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:25:10,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [9873441] [2023-11-21 22:25:10,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:10,929 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:25:10,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:10,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:25:10,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:25:10,964 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:11,084 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2023-11-21 22:25:11,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:25:11,086 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-21 22:25:11,087 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:11,098 INFO L225 Difference]: With dead ends: 136 [2023-11-21 22:25:11,099 INFO L226 Difference]: Without dead ends: 64 [2023-11-21 22:25:11,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:25:11,109 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:11,111 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 70 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:25:11,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-21 22:25:11,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-21 22:25:11,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-21 22:25:11,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2023-11-21 22:25:11,158 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2023-11-21 22:25:11,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:11,159 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2023-11-21 22:25:11,159 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,160 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2023-11-21 22:25:11,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-21 22:25:11,162 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:11,163 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:11,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:25:11,163 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:11,164 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:11,164 INFO L85 PathProgramCache]: Analyzing trace with hash 230164562, now seen corresponding path program 1 times [2023-11-21 22:25:11,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:11,165 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590149722] [2023-11-21 22:25:11,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:11,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:11,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:11,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:25:11,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:11,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:11,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:11,325 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590149722] [2023-11-21 22:25:11,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590149722] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:11,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:11,326 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:11,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445264184] [2023-11-21 22:25:11,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:11,327 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:25:11,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:11,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:25:11,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:25:11,330 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:11,411 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2023-11-21 22:25:11,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:25:11,411 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-21 22:25:11,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:11,413 INFO L225 Difference]: With dead ends: 105 [2023-11-21 22:25:11,413 INFO L226 Difference]: Without dead ends: 56 [2023-11-21 22:25:11,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:25:11,416 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 7 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:11,417 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 103 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:25:11,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-21 22:25:11,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-21 22:25:11,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-21 22:25:11,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2023-11-21 22:25:11,428 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2023-11-21 22:25:11,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:11,429 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2023-11-21 22:25:11,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,429 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2023-11-21 22:25:11,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-21 22:25:11,434 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:11,434 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:11,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:25:11,434 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:11,435 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:11,435 INFO L85 PathProgramCache]: Analyzing trace with hash -2025659563, now seen corresponding path program 1 times [2023-11-21 22:25:11,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:11,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762468533] [2023-11-21 22:25:11,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:11,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:11,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:11,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:25:11,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:11,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:11,750 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:11,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [762468533] [2023-11-21 22:25:11,751 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [762468533] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:11,751 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:11,751 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:11,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1110851663] [2023-11-21 22:25:11,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:11,752 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:25:11,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:11,753 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:11,754 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:11,754 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:11,901 INFO L93 Difference]: Finished difference Result 178 states and 229 transitions. [2023-11-21 22:25:11,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:25:11,901 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-21 22:25:11,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:11,904 INFO L225 Difference]: With dead ends: 178 [2023-11-21 22:25:11,904 INFO L226 Difference]: Without dead ends: 124 [2023-11-21 22:25:11,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:25:11,907 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 62 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:11,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 229 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:25:11,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-11-21 22:25:11,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 107. [2023-11-21 22:25:11,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 68 states have (on average 1.2647058823529411) internal successors, (86), 79 states have internal predecessors, (86), 20 states have call successors, (20), 15 states have call predecessors, (20), 18 states have return successors, (23), 17 states have call predecessors, (23), 20 states have call successors, (23) [2023-11-21 22:25:11,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 129 transitions. [2023-11-21 22:25:11,930 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 129 transitions. Word has length 20 [2023-11-21 22:25:11,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:11,931 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 129 transitions. [2023-11-21 22:25:11,931 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:25:11,931 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 129 transitions. [2023-11-21 22:25:11,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-21 22:25:11,933 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:11,933 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:11,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:25:11,934 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:11,934 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:11,935 INFO L85 PathProgramCache]: Analyzing trace with hash 150185524, now seen corresponding path program 1 times [2023-11-21 22:25:11,935 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:11,935 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1836488061] [2023-11-21 22:25:11,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:11,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:11,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:12,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:25:12,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:12,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:12,043 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1836488061] [2023-11-21 22:25:12,043 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1836488061] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:12,044 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:12,044 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:25:12,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1252705765] [2023-11-21 22:25:12,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:12,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:25:12,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:12,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:25:12,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:25:12,046 INFO L87 Difference]: Start difference. First operand 107 states and 129 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:25:12,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:12,167 INFO L93 Difference]: Finished difference Result 212 states and 258 transitions. [2023-11-21 22:25:12,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:25:12,168 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 23 [2023-11-21 22:25:12,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:12,173 INFO L225 Difference]: With dead ends: 212 [2023-11-21 22:25:12,174 INFO L226 Difference]: Without dead ends: 107 [2023-11-21 22:25:12,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:12,186 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 60 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:12,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 54 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:25:12,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2023-11-21 22:25:12,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 107. [2023-11-21 22:25:12,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 68 states have (on average 1.2352941176470589) internal successors, (84), 79 states have internal predecessors, (84), 20 states have call successors, (20), 15 states have call predecessors, (20), 18 states have return successors, (23), 17 states have call predecessors, (23), 20 states have call successors, (23) [2023-11-21 22:25:12,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 127 transitions. [2023-11-21 22:25:12,226 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 127 transitions. Word has length 23 [2023-11-21 22:25:12,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:12,226 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 127 transitions. [2023-11-21 22:25:12,227 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:25:12,227 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 127 transitions. [2023-11-21 22:25:12,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-21 22:25:12,234 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:12,234 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:12,234 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:25:12,234 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:12,235 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:12,235 INFO L85 PathProgramCache]: Analyzing trace with hash 1354966948, now seen corresponding path program 1 times [2023-11-21 22:25:12,235 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:12,237 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1838310231] [2023-11-21 22:25:12,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:12,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:12,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:12,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:25:12,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-21 22:25:12,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-21 22:25:12,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,339 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:25:12,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:12,340 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1838310231] [2023-11-21 22:25:12,340 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1838310231] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:12,340 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:12,340 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:12,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [490218848] [2023-11-21 22:25:12,341 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:12,341 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:25:12,341 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:12,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:12,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:12,342 INFO L87 Difference]: Start difference. First operand 107 states and 127 transitions. Second operand has 5 states, 5 states have (on average 4.6) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:25:12,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:12,651 INFO L93 Difference]: Finished difference Result 251 states and 314 transitions. [2023-11-21 22:25:12,651 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:25:12,651 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2023-11-21 22:25:12,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:12,658 INFO L225 Difference]: With dead ends: 251 [2023-11-21 22:25:12,661 INFO L226 Difference]: Without dead ends: 197 [2023-11-21 22:25:12,662 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:25:12,665 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 132 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:12,666 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 123 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:25:12,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2023-11-21 22:25:12,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 169. [2023-11-21 22:25:12,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 111 states have (on average 1.2432432432432432) internal successors, (138), 122 states have internal predecessors, (138), 27 states have call successors, (27), 22 states have call predecessors, (27), 30 states have return successors, (40), 30 states have call predecessors, (40), 27 states have call successors, (40) [2023-11-21 22:25:12,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 205 transitions. [2023-11-21 22:25:12,707 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 205 transitions. Word has length 33 [2023-11-21 22:25:12,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:12,707 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 205 transitions. [2023-11-21 22:25:12,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.6) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:25:12,708 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 205 transitions. [2023-11-21 22:25:12,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-11-21 22:25:12,709 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:12,709 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:12,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:25:12,710 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:12,710 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:12,711 INFO L85 PathProgramCache]: Analyzing trace with hash -2061787315, now seen corresponding path program 1 times [2023-11-21 22:25:12,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:12,711 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317193699] [2023-11-21 22:25:12,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:12,712 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:12,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:12,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:25:12,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:12,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-21 22:25:12,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:12,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:12,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317193699] [2023-11-21 22:25:12,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317193699] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:12,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:12,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:25:12,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625316062] [2023-11-21 22:25:12,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:12,819 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:25:12,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:12,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:25:12,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:25:12,821 INFO L87 Difference]: Start difference. First operand 169 states and 205 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:25:13,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:13,153 INFO L93 Difference]: Finished difference Result 288 states and 354 transitions. [2023-11-21 22:25:13,153 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-21 22:25:13,154 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2023-11-21 22:25:13,154 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:13,155 INFO L225 Difference]: With dead ends: 288 [2023-11-21 22:25:13,156 INFO L226 Difference]: Without dead ends: 172 [2023-11-21 22:25:13,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:25:13,158 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 89 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:13,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 175 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:25:13,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2023-11-21 22:25:13,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 168. [2023-11-21 22:25:13,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 111 states have (on average 1.1981981981981982) internal successors, (133), 121 states have internal predecessors, (133), 26 states have call successors, (26), 22 states have call predecessors, (26), 30 states have return successors, (34), 30 states have call predecessors, (34), 26 states have call successors, (34) [2023-11-21 22:25:13,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 193 transitions. [2023-11-21 22:25:13,184 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 193 transitions. Word has length 36 [2023-11-21 22:25:13,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:13,184 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 193 transitions. [2023-11-21 22:25:13,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-21 22:25:13,185 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 193 transitions. [2023-11-21 22:25:13,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-21 22:25:13,186 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:13,187 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:13,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:25:13,187 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:13,188 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:13,188 INFO L85 PathProgramCache]: Analyzing trace with hash 700931417, now seen corresponding path program 1 times [2023-11-21 22:25:13,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:13,188 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1698524959] [2023-11-21 22:25:13,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:13,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:13,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:13,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:25:13,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:13,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:13,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-21 22:25:13,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:13,725 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:13,725 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1698524959] [2023-11-21 22:25:13,725 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1698524959] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:13,725 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:13,725 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-21 22:25:13,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956375851] [2023-11-21 22:25:13,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:13,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-21 22:25:13,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:13,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-21 22:25:13,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:25:13,729 INFO L87 Difference]: Start difference. First operand 168 states and 193 transitions. Second operand has 10 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 6 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:25:14,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:14,455 INFO L93 Difference]: Finished difference Result 458 states and 543 transitions. [2023-11-21 22:25:14,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-21 22:25:14,455 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 6 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 39 [2023-11-21 22:25:14,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:14,459 INFO L225 Difference]: With dead ends: 458 [2023-11-21 22:25:14,459 INFO L226 Difference]: Without dead ends: 343 [2023-11-21 22:25:14,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=135, Invalid=417, Unknown=0, NotChecked=0, Total=552 [2023-11-21 22:25:14,461 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 326 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 534 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 715 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 534 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:14,461 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 297 Invalid, 715 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 534 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:25:14,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2023-11-21 22:25:14,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 294. [2023-11-21 22:25:14,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 196 states have (on average 1.1989795918367347) internal successors, (235), 212 states have internal predecessors, (235), 47 states have call successors, (47), 40 states have call predecessors, (47), 50 states have return successors, (60), 50 states have call predecessors, (60), 47 states have call successors, (60) [2023-11-21 22:25:14,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 342 transitions. [2023-11-21 22:25:14,515 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 342 transitions. Word has length 39 [2023-11-21 22:25:14,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:14,516 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 342 transitions. [2023-11-21 22:25:14,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 3.111111111111111) internal successors, (28), 8 states have internal predecessors, (28), 6 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:25:14,517 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 342 transitions. [2023-11-21 22:25:14,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-21 22:25:14,519 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:14,519 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:14,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:25:14,520 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:14,520 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:14,520 INFO L85 PathProgramCache]: Analyzing trace with hash 227977609, now seen corresponding path program 1 times [2023-11-21 22:25:14,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:14,524 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650360849] [2023-11-21 22:25:14,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:14,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:14,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:25:14,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:14,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:14,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:25:14,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-21 22:25:14,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:25:14,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:25:14,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,786 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:25:14,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:14,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650360849] [2023-11-21 22:25:14,786 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650360849] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:25:14,787 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [332202497] [2023-11-21 22:25:14,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:14,787 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:25:14,787 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:25:14,790 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:25:14,810 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:25:14,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:14,890 INFO L262 TraceCheckSpWp]: Trace formula consists of 256 conjuncts, 18 conjunts are in the unsatisfiable core [2023-11-21 22:25:14,898 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:25:15,201 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 8 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-21 22:25:15,201 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:25:15,545 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-21 22:25:15,545 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [332202497] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:25:15,545 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:25:15,546 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 22 [2023-11-21 22:25:15,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586543276] [2023-11-21 22:25:15,546 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:25:15,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-21 22:25:15,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:15,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-21 22:25:15,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=388, Unknown=0, NotChecked=0, Total=462 [2023-11-21 22:25:15,549 INFO L87 Difference]: Start difference. First operand 294 states and 342 transitions. Second operand has 22 states, 21 states have (on average 4.809523809523809) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (23), 9 states have call predecessors, (23), 6 states have return successors, (19), 10 states have call predecessors, (19), 8 states have call successors, (19) [2023-11-21 22:25:21,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:21,430 INFO L93 Difference]: Finished difference Result 1766 states and 2212 transitions. [2023-11-21 22:25:21,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 144 states. [2023-11-21 22:25:21,431 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 4.809523809523809) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (23), 9 states have call predecessors, (23), 6 states have return successors, (19), 10 states have call predecessors, (19), 8 states have call successors, (19) Word has length 60 [2023-11-21 22:25:21,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:21,445 INFO L225 Difference]: With dead ends: 1766 [2023-11-21 22:25:21,445 INFO L226 Difference]: Without dead ends: 1474 [2023-11-21 22:25:21,458 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 320 GetRequests, 162 SyntacticMatches, 0 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8966 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=4255, Invalid=21185, Unknown=0, NotChecked=0, Total=25440 [2023-11-21 22:25:21,459 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 1110 mSDsluCounter, 781 mSDsCounter, 0 mSdLazyCounter, 2183 mSolverCounterSat, 832 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1114 SdHoareTripleChecker+Valid, 876 SdHoareTripleChecker+Invalid, 3015 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 832 IncrementalHoareTripleChecker+Valid, 2183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:21,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1114 Valid, 876 Invalid, 3015 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [832 Valid, 2183 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2023-11-21 22:25:21,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1474 states. [2023-11-21 22:25:21,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1474 to 1019. [2023-11-21 22:25:21,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1019 states, 678 states have (on average 1.1371681415929205) internal successors, (771), 718 states have internal predecessors, (771), 159 states have call successors, (159), 139 states have call predecessors, (159), 181 states have return successors, (234), 179 states have call predecessors, (234), 159 states have call successors, (234) [2023-11-21 22:25:21,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1019 states to 1019 states and 1164 transitions. [2023-11-21 22:25:21,601 INFO L78 Accepts]: Start accepts. Automaton has 1019 states and 1164 transitions. Word has length 60 [2023-11-21 22:25:21,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:21,601 INFO L495 AbstractCegarLoop]: Abstraction has 1019 states and 1164 transitions. [2023-11-21 22:25:21,602 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 4.809523809523809) internal successors, (101), 18 states have internal predecessors, (101), 8 states have call successors, (23), 9 states have call predecessors, (23), 6 states have return successors, (19), 10 states have call predecessors, (19), 8 states have call successors, (19) [2023-11-21 22:25:21,602 INFO L276 IsEmpty]: Start isEmpty. Operand 1019 states and 1164 transitions. [2023-11-21 22:25:21,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2023-11-21 22:25:21,608 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:21,608 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:21,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 22:25:21,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:25:21,823 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:21,824 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:21,824 INFO L85 PathProgramCache]: Analyzing trace with hash 487716371, now seen corresponding path program 1 times [2023-11-21 22:25:21,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:21,824 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1798251039] [2023-11-21 22:25:21,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:21,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:21,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:22,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:25:22,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:22,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:22,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:25:22,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-21 22:25:22,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:22,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:25:22,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-21 22:25:22,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2023-11-21 22:25:22,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-21 22:25:22,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:22,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:22,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2023-11-21 22:25:22,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,326 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 34 proven. 11 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2023-11-21 22:25:22,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:22,327 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1798251039] [2023-11-21 22:25:22,327 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1798251039] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:25:22,327 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [637814622] [2023-11-21 22:25:22,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:22,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:25:22,328 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:25:22,329 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:25:22,347 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:25:22,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,445 INFO L262 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 19 conjunts are in the unsatisfiable core [2023-11-21 22:25:22,453 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:25:22,641 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-21 22:25:22,641 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:25:22,642 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [637814622] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:22,642 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:25:22,642 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 17 [2023-11-21 22:25:22,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1030191122] [2023-11-21 22:25:22,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:22,643 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:25:22,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:22,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:25:22,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=225, Unknown=0, NotChecked=0, Total=272 [2023-11-21 22:25:22,645 INFO L87 Difference]: Start difference. First operand 1019 states and 1164 transitions. Second operand has 9 states, 8 states have (on average 7.375) internal successors, (59), 9 states have internal predecessors, (59), 5 states have call successors, (13), 3 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-21 22:25:23,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:23,323 INFO L93 Difference]: Finished difference Result 1417 states and 1632 transitions. [2023-11-21 22:25:23,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2023-11-21 22:25:23,324 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 7.375) internal successors, (59), 9 states have internal predecessors, (59), 5 states have call successors, (13), 3 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 5 states have call successors, (13) Word has length 101 [2023-11-21 22:25:23,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:23,331 INFO L225 Difference]: With dead ends: 1417 [2023-11-21 22:25:23,331 INFO L226 Difference]: Without dead ends: 1102 [2023-11-21 22:25:23,333 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 118 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=149, Invalid=607, Unknown=0, NotChecked=0, Total=756 [2023-11-21 22:25:23,334 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 84 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 537 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 579 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 537 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:23,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 173 Invalid, 579 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 537 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:25:23,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1102 states. [2023-11-21 22:25:23,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1102 to 819. [2023-11-21 22:25:23,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 819 states, 538 states have (on average 1.1338289962825279) internal successors, (610), 578 states have internal predecessors, (610), 127 states have call successors, (127), 113 states have call predecessors, (127), 153 states have return successors, (186), 147 states have call predecessors, (186), 127 states have call successors, (186) [2023-11-21 22:25:23,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 819 states to 819 states and 923 transitions. [2023-11-21 22:25:23,437 INFO L78 Accepts]: Start accepts. Automaton has 819 states and 923 transitions. Word has length 101 [2023-11-21 22:25:23,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:23,438 INFO L495 AbstractCegarLoop]: Abstraction has 819 states and 923 transitions. [2023-11-21 22:25:23,438 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 7.375) internal successors, (59), 9 states have internal predecessors, (59), 5 states have call successors, (13), 3 states have call predecessors, (13), 4 states have return successors, (13), 4 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-21 22:25:23,438 INFO L276 IsEmpty]: Start isEmpty. Operand 819 states and 923 transitions. [2023-11-21 22:25:23,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-21 22:25:23,442 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:25:23,442 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:23,468 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:25:23,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-21 22:25:23,656 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:25:23,656 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:23,656 INFO L85 PathProgramCache]: Analyzing trace with hash 1187234252, now seen corresponding path program 1 times [2023-11-21 22:25:23,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:23,656 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640197161] [2023-11-21 22:25:23,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:23,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:23,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:25:23,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:25:23,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:23,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:23,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:25:23,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-21 22:25:23,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:23,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:25:23,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-21 22:25:23,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-21 22:25:23,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-21 22:25:23,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-21 22:25:23,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:25:23,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:25:23,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2023-11-21 22:25:23,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,989 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2023-11-21 22:25:23,990 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:23,990 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1640197161] [2023-11-21 22:25:23,990 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1640197161] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:25:23,990 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [461002092] [2023-11-21 22:25:23,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:23,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:25:23,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:25:23,992 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:25:24,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:25:24,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:24,127 INFO L262 TraceCheckSpWp]: Trace formula consists of 355 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-21 22:25:24,136 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:25:24,216 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2023-11-21 22:25:24,217 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:25:24,217 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [461002092] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:24,217 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:25:24,217 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 10 [2023-11-21 22:25:24,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982618967] [2023-11-21 22:25:24,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:24,218 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:25:24,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:24,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:24,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:25:24,219 INFO L87 Difference]: Start difference. First operand 819 states and 923 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2023-11-21 22:25:24,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:24,451 INFO L93 Difference]: Finished difference Result 1603 states and 1853 transitions. [2023-11-21 22:25:24,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:25:24,452 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 102 [2023-11-21 22:25:24,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:25:24,454 INFO L225 Difference]: With dead ends: 1603 [2023-11-21 22:25:24,454 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:25:24,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=102, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:25:24,458 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 57 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:25:24,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 173 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:25:24,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:25:24,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:25:24,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:24,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:25:24,461 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102 [2023-11-21 22:25:24,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:25:24,461 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:25:24,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2023-11-21 22:25:24,462 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:25:24,462 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:25:24,464 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:25:24,489 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:25:24,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:25:24,681 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:25:32,642 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 898 905) no Hoare annotation was computed. [2023-11-21 22:25:32,643 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 898 905) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2023-11-21 22:25:32,643 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2023-11-21 22:25:32,643 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2023-11-21 22:25:32,643 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: true [2023-11-21 22:25:32,643 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-21 22:25:32,644 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-21 22:25:32,644 INFO L899 garLoopResultBuilder]: For program point L911-1(line 911) no Hoare annotation was computed. [2023-11-21 22:25:32,644 INFO L899 garLoopResultBuilder]: For program point L267(line 267) no Hoare annotation was computed. [2023-11-21 22:25:32,644 INFO L899 garLoopResultBuilder]: For program point L292(lines 292 298) no Hoare annotation was computed. [2023-11-21 22:25:32,644 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 301) no Hoare annotation was computed. [2023-11-21 22:25:32,644 INFO L899 garLoopResultBuilder]: For program point L288-1(lines 273 305) no Hoare annotation was computed. [2023-11-21 22:25:32,645 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 1)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1))) (and (or (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 0))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1)) (= ~waterLevel~0 0)) (or (and .cse2 .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5 (and .cse4 .cse6)) (or .cse0 (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse4)) .cse6) .cse1 .cse5 (and .cse2 .cse3)))) [2023-11-21 22:25:32,645 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2023-11-21 22:25:32,645 INFO L899 garLoopResultBuilder]: For program point L280-1(line 280) no Hoare annotation was computed. [2023-11-21 22:25:32,645 INFO L895 garLoopResultBuilder]: At program point L879(line 879) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-21 22:25:32,646 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (and (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-21 22:25:32,646 INFO L895 garLoopResultBuilder]: At program point L884(line 884) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1))) [2023-11-21 22:25:32,646 INFO L899 garLoopResultBuilder]: For program point L884-1(lines 865 889) no Hoare annotation was computed. [2023-11-21 22:25:32,646 INFO L899 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2023-11-21 22:25:32,646 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 781 804) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1))) [2023-11-21 22:25:32,646 INFO L899 garLoopResultBuilder]: For program point L282(lines 282 302) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 881) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 267) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 886) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 163 192) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point L188(lines 163 192) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point L184(line 184) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 181) no Hoare annotation was computed. [2023-11-21 22:25:32,647 INFO L902 garLoopResultBuilder]: At program point L177-1(lines 177 181) the Hoare annotation is: true [2023-11-21 22:25:32,648 INFO L902 garLoopResultBuilder]: At program point L173-2(lines 173 187) the Hoare annotation is: true [2023-11-21 22:25:32,648 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 163 192) the Hoare annotation is: true [2023-11-21 22:25:32,648 INFO L902 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: true [2023-11-21 22:25:32,648 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2023-11-21 22:25:32,648 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 96 104) the Hoare annotation is: true [2023-11-21 22:25:32,648 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2023-11-21 22:25:32,648 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2023-11-21 22:25:32,648 INFO L899 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2023-11-21 22:25:32,648 INFO L895 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2023-11-21 22:25:32,649 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2023-11-21 22:25:32,649 INFO L899 garLoopResultBuilder]: For program point L739-1(lines 739 745) no Hoare annotation was computed. [2023-11-21 22:25:32,649 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:25:32,649 INFO L895 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse3 .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2))) [2023-11-21 22:25:32,649 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~pumpRunning~0 1))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2023-11-21 22:25:32,649 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:25:32,650 INFO L899 garLoopResultBuilder]: For program point L249(lines 249 256) no Hoare annotation was computed. [2023-11-21 22:25:32,650 INFO L899 garLoopResultBuilder]: For program point L249-2(lines 249 256) no Hoare annotation was computed. [2023-11-21 22:25:32,650 INFO L895 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~pumpRunning~0 1))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2023-11-21 22:25:32,650 INFO L899 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2023-11-21 22:25:32,650 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse2 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 (<= ~waterLevel~0 1) .cse0 .cse1))) [2023-11-21 22:25:32,650 INFO L899 garLoopResultBuilder]: For program point L770(lines 709 774) no Hoare annotation was computed. [2023-11-21 22:25:32,650 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-21 22:25:32,651 INFO L899 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2023-11-21 22:25:32,651 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 813 837) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-21 22:25:32,651 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2023-11-21 22:25:32,651 INFO L895 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (< 0 |processEnvironment__wrappee__highWaterSensor_~tmp~6#1|)))) (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1))))) [2023-11-21 22:25:32,651 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 829) no Hoare annotation was computed. [2023-11-21 22:25:32,653 INFO L899 garLoopResultBuilder]: For program point L817(lines 817 834) no Hoare annotation was computed. [2023-11-21 22:25:32,653 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-21 22:25:32,653 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= ~pumpRunning~0 1)) .cse1 .cse2) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2))) [2023-11-21 22:25:32,653 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-21 22:25:32,654 INFO L895 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-21 22:25:32,654 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2023-11-21 22:25:32,654 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2023-11-21 22:25:32,654 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 839 863) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-21 22:25:32,657 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 839 863) no Hoare annotation was computed. [2023-11-21 22:25:32,657 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1))))) [2023-11-21 22:25:32,657 INFO L899 garLoopResultBuilder]: For program point L858-1(lines 839 863) no Hoare annotation was computed. [2023-11-21 22:25:32,660 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:32,662 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:25:32,677 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:25:32 BoogieIcfgContainer [2023-11-21 22:25:32,677 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:25:32,677 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:25:32,678 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:25:32,678 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:25:32,678 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:25:10" (3/4) ... [2023-11-21 22:25:32,681 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:25:32,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:25:32,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:25:32,686 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-21 22:25:32,695 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2023-11-21 22:25:32,696 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-21 22:25:32,697 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:25:32,697 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:25:32,698 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:25:32,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-21 22:25:32,772 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-21 22:25:32,827 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:25:32,830 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:25:32,830 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:25:32,831 INFO L158 Benchmark]: Toolchain (without parser) took 23754.83ms. Allocated memory was 153.1MB in the beginning and 343.9MB in the end (delta: 190.8MB). Free memory was 111.9MB in the beginning and 142.4MB in the end (delta: -30.5MB). Peak memory consumption was 162.1MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,831 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 153.1MB. Free memory is still 125.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:25:32,832 INFO L158 Benchmark]: CACSL2BoogieTranslator took 528.45ms. Allocated memory is still 153.1MB. Free memory was 111.5MB in the beginning and 91.6MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,835 INFO L158 Benchmark]: Boogie Procedure Inliner took 74.67ms. Allocated memory is still 153.1MB. Free memory was 91.6MB in the beginning and 89.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,835 INFO L158 Benchmark]: Boogie Preprocessor took 86.53ms. Allocated memory is still 153.1MB. Free memory was 89.4MB in the beginning and 87.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,836 INFO L158 Benchmark]: RCFGBuilder took 774.25ms. Allocated memory was 153.1MB in the beginning and 197.1MB in the end (delta: 44.0MB). Free memory was 87.1MB in the beginning and 162.3MB in the end (delta: -75.2MB). Peak memory consumption was 34.2MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,837 INFO L158 Benchmark]: TraceAbstraction took 22128.04ms. Allocated memory was 197.1MB in the beginning and 343.9MB in the end (delta: 146.8MB). Free memory was 161.3MB in the beginning and 150.8MB in the end (delta: 10.5MB). Peak memory consumption was 205.5MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,837 INFO L158 Benchmark]: Witness Printer took 152.48ms. Allocated memory is still 343.9MB. Free memory was 150.8MB in the beginning and 142.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-21 22:25:32,839 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 153.1MB. Free memory is still 125.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 528.45ms. Allocated memory is still 153.1MB. Free memory was 111.5MB in the beginning and 91.6MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 74.67ms. Allocated memory is still 153.1MB. Free memory was 91.6MB in the beginning and 89.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 86.53ms. Allocated memory is still 153.1MB. Free memory was 89.4MB in the beginning and 87.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 774.25ms. Allocated memory was 153.1MB in the beginning and 197.1MB in the end (delta: 44.0MB). Free memory was 87.1MB in the beginning and 162.3MB in the end (delta: -75.2MB). Peak memory consumption was 34.2MB. Max. memory is 16.1GB. * TraceAbstraction took 22128.04ms. Allocated memory was 197.1MB in the beginning and 343.9MB in the end (delta: 146.8MB). Free memory was 161.3MB in the beginning and 150.8MB in the end (delta: 10.5MB). Peak memory consumption was 205.5MB. Max. memory is 16.1GB. * Witness Printer took 152.48ms. Allocated memory is still 343.9MB. Free memory was 150.8MB in the beginning and 142.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [160] - GenericResultAtLocation [Line: 262]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [262] - GenericResultAtLocation [Line: 271]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [271] - GenericResultAtLocation [Line: 306]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [306] - GenericResultAtLocation [Line: 341]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [341] - GenericResultAtLocation [Line: 707]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [707] - GenericResultAtLocation [Line: 775]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [775] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 267]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 22.0s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1962 SdHoareTripleChecker+Valid, 3.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1927 mSDsluCounter, 2273 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1714 mSDsCounter, 1219 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3954 IncrementalHoareTripleChecker+Invalid, 5173 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1219 mSolverCounterUnsat, 559 mSDtfsCounter, 3954 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 713 GetRequests, 471 SyntacticMatches, 0 SemanticMatches, 242 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9212 ImplicationChecksByTransitivity, 4.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1019occurred in iteration=8, InterpolantAutomatonStates: 228, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 836 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1092 PreInvPairs, 1230 NumberOfFragments, 737 HoareAnnotationTreeSize, 1092 FomulaSimplifications, 28155 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 27 FomulaSimplificationsInter, 36588 FormulaSimplificationTreeSizeReductionInter, 6.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 712 NumberOfCodeBlocks, 712 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 758 ConstructedInterpolants, 0 QuantifiedInterpolants, 1769 SizeOfPredicates, 15 NumberOfNonLiveVariables, 976 ConjunctsInSsa, 44 ConjunctsInUnsatCore, 14 InterpolantComputations, 9 PerfectInterpolantSequences, 336/363 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) RESULT: Ultimate proved your program to be correct! [2023-11-21 22:25:32,871 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b1ef5f5-5f6d-4649-93b5-69c07ab0e9a3/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE