./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:17:44,872 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:17:44,990 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:17:44,998 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:17:44,999 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:17:45,036 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:17:45,037 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:17:45,038 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:17:45,039 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:17:45,044 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:17:45,044 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:17:45,045 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:17:45,046 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:17:45,048 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:17:45,048 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:17:45,049 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:17:45,049 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:17:45,049 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:17:45,050 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:17:45,050 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:17:45,051 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:17:45,051 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:17:45,052 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:17:45,052 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:17:45,053 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:17:45,053 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:17:45,054 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:17:45,054 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:17:45,055 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:17:45,055 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:17:45,056 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:17:45,057 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:17:45,057 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:17:45,057 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:17:45,057 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:17:45,058 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:17:45,058 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:17:45,058 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:17:45,059 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:17:45,059 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:17:45,060 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:17:45,060 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:17:45,060 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 [2023-11-21 22:17:45,347 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:17:45,384 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:17:45,386 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:17:45,388 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:17:45,389 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:17:45,390 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2023-11-21 22:17:48,675 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:17:48,964 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:17:48,971 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2023-11-21 22:17:48,988 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/data/93c49a9c4/205895745ef44153ad61be2c7bb0ea2a/FLAG81b3522d4 [2023-11-21 22:17:49,009 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/data/93c49a9c4/205895745ef44153ad61be2c7bb0ea2a [2023-11-21 22:17:49,012 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:17:49,014 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:17:49,016 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:17:49,016 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:17:49,022 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:17:49,024 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,025 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77030df8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49, skipping insertion in model container [2023-11-21 22:17:49,025 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,084 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:17:49,441 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2023-11-21 22:17:49,469 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:17:49,483 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:17:49,494 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-21 22:17:49,496 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] [2023-11-21 22:17:49,496 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [526] [2023-11-21 22:17:49,496 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [564] [2023-11-21 22:17:49,497 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [600] [2023-11-21 22:17:49,497 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [609] [2023-11-21 22:17:49,497 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] [2023-11-21 22:17:49,498 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [894] [2023-11-21 22:17:49,540 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2023-11-21 22:17:49,554 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:17:49,574 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:17:49,575 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49 WrapperNode [2023-11-21 22:17:49,575 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:17:49,576 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:17:49,577 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:17:49,577 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:17:49,584 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,599 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,629 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 227 [2023-11-21 22:17:49,630 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:17:49,631 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:17:49,631 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:17:49,631 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:17:49,643 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,644 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,646 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,674 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:17:49,675 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,675 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,681 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,700 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,702 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,703 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,706 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:17:49,707 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:17:49,710 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:17:49,711 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:17:49,712 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (1/1) ... [2023-11-21 22:17:49,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:17:49,733 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:17:49,747 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:17:49,785 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:17:49,798 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:17:49,798 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:17:49,798 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:17:49,798 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:17:49,799 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:17:49,799 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:17:49,799 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:17:49,799 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-21 22:17:49,799 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-21 22:17:49,800 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:17:49,800 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:17:49,800 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:17:49,801 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:17:49,801 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:17:49,801 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:17:49,802 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:17:49,802 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:17:49,803 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:17:49,944 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:17:49,946 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:17:50,282 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:17:50,453 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:17:50,454 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:17:50,455 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:17:50 BoogieIcfgContainer [2023-11-21 22:17:50,456 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:17:50,459 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:17:50,459 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:17:50,463 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:17:50,463 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:17:49" (1/3) ... [2023-11-21 22:17:50,464 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560b31fc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:17:50, skipping insertion in model container [2023-11-21 22:17:50,464 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:17:49" (2/3) ... [2023-11-21 22:17:50,465 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560b31fc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:17:50, skipping insertion in model container [2023-11-21 22:17:50,465 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:17:50" (3/3) ... [2023-11-21 22:17:50,466 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product57.cil.c [2023-11-21 22:17:50,487 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:17:50,487 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:17:50,534 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:17:50,541 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@9f59ec1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:17:50,541 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:17:50,545 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-21 22:17:50,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-21 22:17:50,557 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:50,557 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:50,558 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:50,563 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:50,564 INFO L85 PathProgramCache]: Analyzing trace with hash -1524132150, now seen corresponding path program 1 times [2023-11-21 22:17:50,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:50,574 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1480669251] [2023-11-21 22:17:50,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:50,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:50,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:50,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-21 22:17:50,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:50,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:50,831 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:50,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1480669251] [2023-11-21 22:17:50,832 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1480669251] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:50,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:50,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:17:50,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98306633] [2023-11-21 22:17:50,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:50,840 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:17:50,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:50,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:17:50,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:17:50,888 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:50,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:50,993 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2023-11-21 22:17:50,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:17:50,996 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-21 22:17:50,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:51,005 INFO L225 Difference]: With dead ends: 114 [2023-11-21 22:17:51,006 INFO L226 Difference]: Without dead ends: 53 [2023-11-21 22:17:51,009 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:17:51,013 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:51,015 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 56 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:17:51,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-21 22:17:51,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-21 22:17:51,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-21 22:17:51,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2023-11-21 22:17:51,058 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 17 [2023-11-21 22:17:51,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:51,059 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2023-11-21 22:17:51,059 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,059 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2023-11-21 22:17:51,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-21 22:17:51,062 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:51,062 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:51,062 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:17:51,063 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:51,063 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:51,064 INFO L85 PathProgramCache]: Analyzing trace with hash 1522009959, now seen corresponding path program 1 times [2023-11-21 22:17:51,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:51,064 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469003954] [2023-11-21 22:17:51,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:51,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:51,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:17:51,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,217 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:51,218 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:51,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469003954] [2023-11-21 22:17:51,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469003954] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:51,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:51,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:17:51,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281063142] [2023-11-21 22:17:51,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:51,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:17:51,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:51,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:17:51,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:17:51,222 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:51,307 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2023-11-21 22:17:51,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:17:51,308 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-21 22:17:51,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:51,309 INFO L225 Difference]: With dead ends: 83 [2023-11-21 22:17:51,309 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:17:51,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:17:51,311 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 7 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:51,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 75 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:17:51,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:17:51,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:17:51,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:17:51,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2023-11-21 22:17:51,321 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 18 [2023-11-21 22:17:51,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:51,334 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2023-11-21 22:17:51,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,334 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2023-11-21 22:17:51,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-21 22:17:51,336 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:51,336 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:51,336 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:17:51,337 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:51,337 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:51,338 INFO L85 PathProgramCache]: Analyzing trace with hash -1008959308, now seen corresponding path program 1 times [2023-11-21 22:17:51,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:51,338 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794300740] [2023-11-21 22:17:51,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:51,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:51,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:17:51,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,512 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:51,513 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:51,513 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794300740] [2023-11-21 22:17:51,513 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794300740] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:51,513 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:51,513 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:17:51,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1064333370] [2023-11-21 22:17:51,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:51,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:17:51,515 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:51,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:17:51,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:17:51,516 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:51,627 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2023-11-21 22:17:51,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:17:51,628 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-21 22:17:51,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:51,629 INFO L225 Difference]: With dead ends: 88 [2023-11-21 22:17:51,630 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:17:51,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:17:51,632 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 53 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:51,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 53 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:17:51,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:17:51,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:17:51,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 36 states have internal predecessors, (38), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:17:51,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 56 transitions. [2023-11-21 22:17:51,644 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 56 transitions. Word has length 20 [2023-11-21 22:17:51,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:51,644 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 56 transitions. [2023-11-21 22:17:51,644 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,644 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 56 transitions. [2023-11-21 22:17:51,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-21 22:17:51,646 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:51,646 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:51,646 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:17:51,646 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:51,647 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:51,647 INFO L85 PathProgramCache]: Analyzing trace with hash 2042166363, now seen corresponding path program 1 times [2023-11-21 22:17:51,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:51,647 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770790828] [2023-11-21 22:17:51,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:51,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:51,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:17:51,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:51,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:51,796 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:51,796 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770790828] [2023-11-21 22:17:51,797 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770790828] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:51,797 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:51,797 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:17:51,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1331801281] [2023-11-21 22:17:51,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:51,798 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:17:51,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:51,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:17:51,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:17:51,800 INFO L87 Difference]: Start difference. First operand 45 states and 56 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:51,907 INFO L93 Difference]: Finished difference Result 123 states and 156 transitions. [2023-11-21 22:17:51,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:17:51,908 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-21 22:17:51,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:51,910 INFO L225 Difference]: With dead ends: 123 [2023-11-21 22:17:51,910 INFO L226 Difference]: Without dead ends: 80 [2023-11-21 22:17:51,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:17:51,913 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 38 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:51,913 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 81 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:17:51,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-21 22:17:51,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 78. [2023-11-21 22:17:51,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 52 states have (on average 1.2692307692307692) internal successors, (66), 59 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2023-11-21 22:17:51,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 96 transitions. [2023-11-21 22:17:51,932 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 96 transitions. Word has length 23 [2023-11-21 22:17:51,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:51,932 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 96 transitions. [2023-11-21 22:17:51,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:17:51,932 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 96 transitions. [2023-11-21 22:17:51,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-21 22:17:51,934 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:51,934 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:51,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:17:51,934 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:51,935 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:51,935 INFO L85 PathProgramCache]: Analyzing trace with hash 661089774, now seen corresponding path program 1 times [2023-11-21 22:17:51,935 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:51,935 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457449689] [2023-11-21 22:17:51,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:51,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:51,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:17:52,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:52,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-21 22:17:52,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:52,200 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:52,200 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457449689] [2023-11-21 22:17:52,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457449689] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:52,202 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:52,202 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:17:52,202 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644548434] [2023-11-21 22:17:52,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:52,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:17:52,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:52,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:17:52,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:17:52,207 INFO L87 Difference]: Start difference. First operand 78 states and 96 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-21 22:17:52,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:52,517 INFO L93 Difference]: Finished difference Result 239 states and 300 transitions. [2023-11-21 22:17:52,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:17:52,518 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2023-11-21 22:17:52,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:52,522 INFO L225 Difference]: With dead ends: 239 [2023-11-21 22:17:52,522 INFO L226 Difference]: Without dead ends: 163 [2023-11-21 22:17:52,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:17:52,526 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 89 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:52,527 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 155 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:17:52,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2023-11-21 22:17:52,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 144. [2023-11-21 22:17:52,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 98 states have (on average 1.2551020408163265) internal successors, (123), 107 states have internal predecessors, (123), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (31), 24 states have call predecessors, (31), 22 states have call successors, (31) [2023-11-21 22:17:52,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 176 transitions. [2023-11-21 22:17:52,563 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 176 transitions. Word has length 31 [2023-11-21 22:17:52,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:52,564 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 176 transitions. [2023-11-21 22:17:52,564 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-21 22:17:52,565 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 176 transitions. [2023-11-21 22:17:52,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-21 22:17:52,567 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:52,567 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:52,568 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:17:52,568 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:52,569 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:52,569 INFO L85 PathProgramCache]: Analyzing trace with hash 915107265, now seen corresponding path program 1 times [2023-11-21 22:17:52,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:52,570 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760866473] [2023-11-21 22:17:52,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:52,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:52,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:17:52,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:17:52,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:52,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-21 22:17:52,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:52,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:52,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:52,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760866473] [2023-11-21 22:17:52,963 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [760866473] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:52,964 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:52,964 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-21 22:17:52,964 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [430583742] [2023-11-21 22:17:52,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:52,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-21 22:17:52,965 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:52,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-21 22:17:52,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:17:52,966 INFO L87 Difference]: Start difference. First operand 144 states and 176 transitions. Second operand has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:17:53,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:53,730 INFO L93 Difference]: Finished difference Result 421 states and 531 transitions. [2023-11-21 22:17:53,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-21 22:17:53,734 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2023-11-21 22:17:53,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:53,744 INFO L225 Difference]: With dead ends: 421 [2023-11-21 22:17:53,745 INFO L226 Difference]: Without dead ends: 325 [2023-11-21 22:17:53,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 116 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=143, Invalid=457, Unknown=0, NotChecked=0, Total=600 [2023-11-21 22:17:53,755 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 327 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 406 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 406 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:53,758 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 310 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 406 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:17:53,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2023-11-21 22:17:53,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 298. [2023-11-21 22:17:53,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 206 states have (on average 1.2864077669902914) internal successors, (265), 224 states have internal predecessors, (265), 47 states have call successors, (47), 36 states have call predecessors, (47), 44 states have return successors, (68), 48 states have call predecessors, (68), 47 states have call successors, (68) [2023-11-21 22:17:53,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 380 transitions. [2023-11-21 22:17:53,838 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 380 transitions. Word has length 34 [2023-11-21 22:17:53,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:53,839 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 380 transitions. [2023-11-21 22:17:53,839 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:17:53,839 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 380 transitions. [2023-11-21 22:17:53,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-21 22:17:53,843 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:53,843 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:53,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:17:53,844 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:53,844 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:53,845 INFO L85 PathProgramCache]: Analyzing trace with hash 1085451081, now seen corresponding path program 1 times [2023-11-21 22:17:53,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:53,845 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602085051] [2023-11-21 22:17:53,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:53,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:53,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:17:54,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:17:54,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:54,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-21 22:17:54,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,153 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:17:54,154 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:54,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602085051] [2023-11-21 22:17:54,154 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602085051] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:17:54,155 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1644103682] [2023-11-21 22:17:54,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:54,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:17:54,155 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:17:54,158 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:17:54,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:17:54,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:54,260 INFO L262 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 16 conjunts are in the unsatisfiable core [2023-11-21 22:17:54,267 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:17:54,537 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:17:54,537 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:17:54,802 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:17:54,802 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1644103682] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:17:54,802 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:17:54,803 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 8] total 20 [2023-11-21 22:17:54,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1237309851] [2023-11-21 22:17:54,805 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:17:54,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-11-21 22:17:54,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:54,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-11-21 22:17:54,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=312, Unknown=0, NotChecked=0, Total=380 [2023-11-21 22:17:54,808 INFO L87 Difference]: Start difference. First operand 298 states and 380 transitions. Second operand has 20 states, 17 states have (on average 3.0) internal successors, (51), 15 states have internal predecessors, (51), 6 states have call successors, (12), 6 states have call predecessors, (12), 8 states have return successors, (11), 7 states have call predecessors, (11), 6 states have call successors, (11) [2023-11-21 22:17:56,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:56,511 INFO L93 Difference]: Finished difference Result 1146 states and 1513 transitions. [2023-11-21 22:17:56,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2023-11-21 22:17:56,512 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 17 states have (on average 3.0) internal successors, (51), 15 states have internal predecessors, (51), 6 states have call successors, (12), 6 states have call predecessors, (12), 8 states have return successors, (11), 7 states have call predecessors, (11), 6 states have call successors, (11) Word has length 35 [2023-11-21 22:17:56,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:56,521 INFO L225 Difference]: With dead ends: 1146 [2023-11-21 22:17:56,521 INFO L226 Difference]: Without dead ends: 957 [2023-11-21 22:17:56,525 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 76 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 952 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=536, Invalid=2770, Unknown=0, NotChecked=0, Total=3306 [2023-11-21 22:17:56,527 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 372 mSDsluCounter, 659 mSDsCounter, 0 mSdLazyCounter, 1306 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 722 SdHoareTripleChecker+Invalid, 1500 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 1306 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:56,527 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [380 Valid, 722 Invalid, 1500 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 1306 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-21 22:17:56,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 957 states. [2023-11-21 22:17:56,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 957 to 819. [2023-11-21 22:17:56,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 819 states, 573 states have (on average 1.2443280977312392) internal successors, (713), 607 states have internal predecessors, (713), 129 states have call successors, (129), 106 states have call predecessors, (129), 116 states have return successors, (174), 125 states have call predecessors, (174), 129 states have call successors, (174) [2023-11-21 22:17:56,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 819 states to 819 states and 1016 transitions. [2023-11-21 22:17:56,680 INFO L78 Accepts]: Start accepts. Automaton has 819 states and 1016 transitions. Word has length 35 [2023-11-21 22:17:56,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:56,682 INFO L495 AbstractCegarLoop]: Abstraction has 819 states and 1016 transitions. [2023-11-21 22:17:56,682 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 17 states have (on average 3.0) internal successors, (51), 15 states have internal predecessors, (51), 6 states have call successors, (12), 6 states have call predecessors, (12), 8 states have return successors, (11), 7 states have call predecessors, (11), 6 states have call successors, (11) [2023-11-21 22:17:56,682 INFO L276 IsEmpty]: Start isEmpty. Operand 819 states and 1016 transitions. [2023-11-21 22:17:56,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-21 22:17:56,685 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:56,686 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:56,709 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 22:17:56,902 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-11-21 22:17:56,902 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:56,902 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:56,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1760132326, now seen corresponding path program 1 times [2023-11-21 22:17:56,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:56,903 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030532596] [2023-11-21 22:17:56,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:56,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:56,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:17:57,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:17:57,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-21 22:17:57,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:57,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-21 22:17:57,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:57,276 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:17:57,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:57,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030532596] [2023-11-21 22:17:57,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030532596] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:57,277 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:57,277 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2023-11-21 22:17:57,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1917292653] [2023-11-21 22:17:57,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:57,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-11-21 22:17:57,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:57,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-11-21 22:17:57,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2023-11-21 22:17:57,281 INFO L87 Difference]: Start difference. First operand 819 states and 1016 transitions. Second operand has 14 states, 13 states have (on average 2.0) internal successors, (26), 9 states have internal predecessors, (26), 2 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-21 22:17:58,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:58,754 INFO L93 Difference]: Finished difference Result 1453 states and 1842 transitions. [2023-11-21 22:17:58,758 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2023-11-21 22:17:58,759 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 9 states have internal predecessors, (26), 2 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 38 [2023-11-21 22:17:58,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:58,767 INFO L225 Difference]: With dead ends: 1453 [2023-11-21 22:17:58,767 INFO L226 Difference]: Without dead ends: 1054 [2023-11-21 22:17:58,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 501 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=414, Invalid=1748, Unknown=0, NotChecked=0, Total=2162 [2023-11-21 22:17:58,772 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 217 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 1014 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 1132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 1014 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:58,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [222 Valid, 223 Invalid, 1132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 1014 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-21 22:17:58,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1054 states. [2023-11-21 22:17:58,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1054 to 895. [2023-11-21 22:17:58,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 895 states, 623 states have (on average 1.2247191011235956) internal successors, (763), 663 states have internal predecessors, (763), 141 states have call successors, (141), 119 states have call predecessors, (141), 130 states have return successors, (206), 133 states have call predecessors, (206), 141 states have call successors, (206) [2023-11-21 22:17:58,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 895 states to 895 states and 1110 transitions. [2023-11-21 22:17:58,922 INFO L78 Accepts]: Start accepts. Automaton has 895 states and 1110 transitions. Word has length 38 [2023-11-21 22:17:58,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:17:58,923 INFO L495 AbstractCegarLoop]: Abstraction has 895 states and 1110 transitions. [2023-11-21 22:17:58,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 9 states have internal predecessors, (26), 2 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-21 22:17:58,923 INFO L276 IsEmpty]: Start isEmpty. Operand 895 states and 1110 transitions. [2023-11-21 22:17:58,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-21 22:17:58,930 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:17:58,930 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:17:58,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-21 22:17:58,930 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:17:58,931 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:17:58,931 INFO L85 PathProgramCache]: Analyzing trace with hash -974646141, now seen corresponding path program 1 times [2023-11-21 22:17:58,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:17:58,931 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564841191] [2023-11-21 22:17:58,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:17:58,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:17:58,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:17:59,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:59,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:17:59,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:17:59,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-21 22:17:59,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:17:59,378 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:17:59,378 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:17:59,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564841191] [2023-11-21 22:17:59,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564841191] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:17:59,379 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:17:59,379 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2023-11-21 22:17:59,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1855253667] [2023-11-21 22:17:59,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:17:59,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2023-11-21 22:17:59,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:17:59,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2023-11-21 22:17:59,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2023-11-21 22:17:59,382 INFO L87 Difference]: Start difference. First operand 895 states and 1110 transitions. Second operand has 11 states, 10 states have (on average 3.9) internal successors, (39), 9 states have internal predecessors, (39), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:17:59,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:17:59,921 INFO L93 Difference]: Finished difference Result 1745 states and 2178 transitions. [2023-11-21 22:17:59,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-21 22:17:59,922 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 3.9) internal successors, (39), 9 states have internal predecessors, (39), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 52 [2023-11-21 22:17:59,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:17:59,931 INFO L225 Difference]: With dead ends: 1745 [2023-11-21 22:17:59,931 INFO L226 Difference]: Without dead ends: 1105 [2023-11-21 22:17:59,934 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=97, Invalid=245, Unknown=0, NotChecked=0, Total=342 [2023-11-21 22:17:59,937 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 215 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 302 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:17:59,938 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [219 Valid, 202 Invalid, 399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 302 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:17:59,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1105 states. [2023-11-21 22:18:00,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1105 to 1040. [2023-11-21 22:18:00,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1040 states, 731 states have (on average 1.2339261285909713) internal successors, (902), 775 states have internal predecessors, (902), 166 states have call successors, (166), 132 states have call predecessors, (166), 142 states have return successors, (236), 155 states have call predecessors, (236), 166 states have call successors, (236) [2023-11-21 22:18:00,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1040 states to 1040 states and 1304 transitions. [2023-11-21 22:18:00,091 INFO L78 Accepts]: Start accepts. Automaton has 1040 states and 1304 transitions. Word has length 52 [2023-11-21 22:18:00,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:18:00,091 INFO L495 AbstractCegarLoop]: Abstraction has 1040 states and 1304 transitions. [2023-11-21 22:18:00,092 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 3.9) internal successors, (39), 9 states have internal predecessors, (39), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:18:00,092 INFO L276 IsEmpty]: Start isEmpty. Operand 1040 states and 1304 transitions. [2023-11-21 22:18:00,094 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-21 22:18:00,094 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:18:00,095 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:18:00,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-21 22:18:00,095 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:18:00,096 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:18:00,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1346222448, now seen corresponding path program 1 times [2023-11-21 22:18:00,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:18:00,096 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1004273730] [2023-11-21 22:18:00,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:18:00,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:18:00,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:18:00,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:18:00,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:18:00,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:18:00,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:18:00,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:18:00,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,680 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:18:00,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:18:00,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1004273730] [2023-11-21 22:18:00,683 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1004273730] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:18:00,683 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2046305106] [2023-11-21 22:18:00,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:18:00,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:18:00,685 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:18:00,686 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:18:00,749 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:18:00,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:00,834 INFO L262 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 23 conjunts are in the unsatisfiable core [2023-11-21 22:18:00,840 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:18:01,124 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:18:01,124 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:18:01,484 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-21 22:18:01,484 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2046305106] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:18:01,484 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:18:01,485 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 9, 8] total 21 [2023-11-21 22:18:01,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1548617355] [2023-11-21 22:18:01,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:18:01,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2023-11-21 22:18:01,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:18:01,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2023-11-21 22:18:01,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=321, Unknown=0, NotChecked=0, Total=420 [2023-11-21 22:18:01,488 INFO L87 Difference]: Start difference. First operand 1040 states and 1304 transitions. Second operand has 21 states, 19 states have (on average 4.368421052631579) internal successors, (83), 19 states have internal predecessors, (83), 10 states have call successors, (17), 8 states have call predecessors, (17), 7 states have return successors, (15), 9 states have call predecessors, (15), 10 states have call successors, (15) [2023-11-21 22:18:03,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:18:03,243 INFO L93 Difference]: Finished difference Result 3424 states and 4562 transitions. [2023-11-21 22:18:03,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2023-11-21 22:18:03,243 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 19 states have (on average 4.368421052631579) internal successors, (83), 19 states have internal predecessors, (83), 10 states have call successors, (17), 8 states have call predecessors, (17), 7 states have return successors, (15), 9 states have call predecessors, (15), 10 states have call successors, (15) Word has length 55 [2023-11-21 22:18:03,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:18:03,266 INFO L225 Difference]: With dead ends: 3424 [2023-11-21 22:18:03,266 INFO L226 Difference]: Without dead ends: 2631 [2023-11-21 22:18:03,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 121 SyntacticMatches, 2 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 823 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=685, Invalid=2285, Unknown=0, NotChecked=0, Total=2970 [2023-11-21 22:18:03,275 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 850 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 755 mSolverCounterSat, 487 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 856 SdHoareTripleChecker+Valid, 412 SdHoareTripleChecker+Invalid, 1242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 487 IncrementalHoareTripleChecker+Valid, 755 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-21 22:18:03,276 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [856 Valid, 412 Invalid, 1242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [487 Valid, 755 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-21 22:18:03,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2631 states. [2023-11-21 22:18:03,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2631 to 2258. [2023-11-21 22:18:03,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2258 states, 1567 states have (on average 1.1933631142310146) internal successors, (1870), 1645 states have internal predecessors, (1870), 363 states have call successors, (363), 307 states have call predecessors, (363), 327 states have return successors, (560), 341 states have call predecessors, (560), 363 states have call successors, (560) [2023-11-21 22:18:03,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2258 states to 2258 states and 2793 transitions. [2023-11-21 22:18:03,648 INFO L78 Accepts]: Start accepts. Automaton has 2258 states and 2793 transitions. Word has length 55 [2023-11-21 22:18:03,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:18:03,649 INFO L495 AbstractCegarLoop]: Abstraction has 2258 states and 2793 transitions. [2023-11-21 22:18:03,649 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 19 states have (on average 4.368421052631579) internal successors, (83), 19 states have internal predecessors, (83), 10 states have call successors, (17), 8 states have call predecessors, (17), 7 states have return successors, (15), 9 states have call predecessors, (15), 10 states have call successors, (15) [2023-11-21 22:18:03,649 INFO L276 IsEmpty]: Start isEmpty. Operand 2258 states and 2793 transitions. [2023-11-21 22:18:03,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-21 22:18:03,652 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:18:03,653 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:18:03,679 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:18:03,869 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-21 22:18:03,870 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:18:03,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:18:03,870 INFO L85 PathProgramCache]: Analyzing trace with hash 1207948965, now seen corresponding path program 1 times [2023-11-21 22:18:03,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:18:03,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842495124] [2023-11-21 22:18:03,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:18:03,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:18:03,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:18:04,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:18:04,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:18:04,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:18:04,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:18:04,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:18:04,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-21 22:18:04,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-21 22:18:04,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:18:04,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-21 22:18:04,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,441 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 12 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-21 22:18:04,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:18:04,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842495124] [2023-11-21 22:18:04,441 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842495124] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:18:04,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2020537868] [2023-11-21 22:18:04,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:18:04,442 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:18:04,442 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:18:04,443 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:18:04,469 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:18:04,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:18:04,543 INFO L262 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-21 22:18:04,547 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:18:04,649 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-21 22:18:04,650 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:18:04,650 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2020537868] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:18:04,650 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:18:04,651 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [15] total 17 [2023-11-21 22:18:04,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927352308] [2023-11-21 22:18:04,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:18:04,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:18:04,652 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:18:04,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:18:04,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=225, Unknown=0, NotChecked=0, Total=272 [2023-11-21 22:18:04,653 INFO L87 Difference]: Start difference. First operand 2258 states and 2793 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-21 22:18:05,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:18:05,103 INFO L93 Difference]: Finished difference Result 4323 states and 5378 transitions. [2023-11-21 22:18:05,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:18:05,103 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 69 [2023-11-21 22:18:05,105 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:18:05,107 INFO L225 Difference]: With dead ends: 4323 [2023-11-21 22:18:05,107 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:18:05,119 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=285, Unknown=0, NotChecked=0, Total=342 [2023-11-21 22:18:05,120 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 43 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:18:05,120 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 140 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:18:05,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:18:05,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:18:05,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:18:05,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:18:05,122 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2023-11-21 22:18:05,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:18:05,123 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:18:05,123 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-21 22:18:05,123 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:18:05,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:18:05,126 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:18:05,152 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:18:05,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:18:05,343 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:18:15,131 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2023-11-21 22:18:15,132 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2023-11-21 22:18:15,132 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 450 461) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1) (or .cse0 (< 1 ~waterLevel~0) .cse1))) [2023-11-21 22:18:15,133 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 450 461) no Hoare annotation was computed. [2023-11-21 22:18:15,133 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 896 925) no Hoare annotation was computed. [2023-11-21 22:18:15,133 INFO L899 garLoopResultBuilder]: For program point L921(lines 896 925) no Hoare annotation was computed. [2023-11-21 22:18:15,133 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2023-11-21 22:18:15,134 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 914) no Hoare annotation was computed. [2023-11-21 22:18:15,134 INFO L902 garLoopResultBuilder]: At program point L910-1(lines 910 914) the Hoare annotation is: true [2023-11-21 22:18:15,134 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 896 925) the Hoare annotation is: true [2023-11-21 22:18:15,134 INFO L902 garLoopResultBuilder]: At program point L906-2(lines 906 920) the Hoare annotation is: true [2023-11-21 22:18:15,134 INFO L902 garLoopResultBuilder]: At program point L902(line 902) the Hoare annotation is: true [2023-11-21 22:18:15,135 INFO L899 garLoopResultBuilder]: For program point L902-1(line 902) no Hoare annotation was computed. [2023-11-21 22:18:15,135 INFO L899 garLoopResultBuilder]: For program point L576(lines 576 596) no Hoare annotation was computed. [2023-11-21 22:18:15,135 INFO L899 garLoopResultBuilder]: For program point L605(line 605) no Hoare annotation was computed. [2023-11-21 22:18:15,135 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) .cse0 .cse1))) [2023-11-21 22:18:15,136 INFO L899 garLoopResultBuilder]: For program point L586(lines 586 592) no Hoare annotation was computed. [2023-11-21 22:18:15,136 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 595) no Hoare annotation was computed. [2023-11-21 22:18:15,136 INFO L899 garLoopResultBuilder]: For program point L582-1(lines 567 599) no Hoare annotation was computed. [2023-11-21 22:18:15,137 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not .cse8)) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< 1 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (< 2 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) (or .cse2 .cse3 .cse4 .cse1) (or .cse3 (= 2 ~waterLevel~0) .cse5 .cse1) (let ((.cse7 (= ~waterLevel~0 1))) (or (and .cse6 .cse7) .cse8 (and .cse9 .cse7) .cse5 .cse1)) (or .cse2 (and .cse6 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse4))) .cse1 (and .cse9 .cse0))))) [2023-11-21 22:18:15,137 INFO L899 garLoopResultBuilder]: For program point L574-1(line 574) no Hoare annotation was computed. [2023-11-21 22:18:15,137 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or (= |old(~pumpRunning~0)| 0) .cse0 .cse1))) [2023-11-21 22:18:15,137 INFO L899 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2023-11-21 22:18:15,138 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2023-11-21 22:18:15,138 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 617 640) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (and .cse0 (= 2 ~waterLevel~0)) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-21 22:18:15,138 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2023-11-21 22:18:15,138 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2023-11-21 22:18:15,138 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2023-11-21 22:18:15,139 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 605) no Hoare annotation was computed. [2023-11-21 22:18:15,139 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2023-11-21 22:18:15,139 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 462 470) the Hoare annotation is: true [2023-11-21 22:18:15,139 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 462 470) no Hoare annotation was computed. [2023-11-21 22:18:15,140 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 887) the Hoare annotation is: false [2023-11-21 22:18:15,140 INFO L899 garLoopResultBuilder]: For program point L977(lines 977 984) no Hoare annotation was computed. [2023-11-21 22:18:15,140 INFO L899 garLoopResultBuilder]: For program point L977-2(lines 977 984) no Hoare annotation was computed. [2023-11-21 22:18:15,140 INFO L899 garLoopResultBuilder]: For program point L841(lines 840 885) no Hoare annotation was computed. [2023-11-21 22:18:15,140 INFO L895 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2023-11-21 22:18:15,141 INFO L895 garLoopResultBuilder]: At program point L883(lines 840 885) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 (or (< 0 ~pumpRunning~0) (not (= ~methaneLevelCritical~0 0))) .cse2) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2023-11-21 22:18:15,141 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 856) no Hoare annotation was computed. [2023-11-21 22:18:15,141 INFO L899 garLoopResultBuilder]: For program point L850-1(lines 850 856) no Hoare annotation was computed. [2023-11-21 22:18:15,141 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:18:15,142 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 870 881) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2023-11-21 22:18:15,142 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:18:15,142 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 866) no Hoare annotation was computed. [2023-11-21 22:18:15,142 INFO L899 garLoopResultBuilder]: For program point L860-1(lines 860 866) no Hoare annotation was computed. [2023-11-21 22:18:15,143 INFO L899 garLoopResultBuilder]: For program point L889(lines 830 893) no Hoare annotation was computed. [2023-11-21 22:18:15,143 INFO L895 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse0 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (or (< 0 ~pumpRunning~0) (not (= ~methaneLevelCritical~0 0))) .cse3) (and (<= ~waterLevel~0 1) .cse1 .cse2 .cse3))) [2023-11-21 22:18:15,143 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) .cse0 .cse1) (or (< 2 ~waterLevel~0) (not .cse0) .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) (<= ~waterLevel~0 1))))) [2023-11-21 22:18:15,144 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2023-11-21 22:18:15,144 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2023-11-21 22:18:15,144 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 649 673) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< 1 ~waterLevel~0) .cse0) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-21 22:18:15,144 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< 1 ~waterLevel~0) .cse0))) [2023-11-21 22:18:15,145 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2023-11-21 22:18:15,145 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2023-11-21 22:18:15,145 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) .cse0) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|))))) [2023-11-21 22:18:15,145 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2023-11-21 22:18:15,146 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 438 449) no Hoare annotation was computed. [2023-11-21 22:18:15,146 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 438 449) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< 2 |old(~waterLevel~0)|)) (or (= 2 ~waterLevel~0) (and (<= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0)) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-21 22:18:15,149 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:18:15,151 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:18:15,165 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:18:15 BoogieIcfgContainer [2023-11-21 22:18:15,165 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:18:15,166 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:18:15,166 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:18:15,166 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:18:15,167 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:17:50" (3/4) ... [2023-11-21 22:18:15,169 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:18:15,173 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:18:15,173 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:18:15,173 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:18:15,173 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:18:15,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-21 22:18:15,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:18:15,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:18:15,183 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 47 nodes and edges [2023-11-21 22:18:15,184 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-21 22:18:15,185 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:18:15,186 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:18:15,187 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:18:15,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-21 22:18:15,256 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-21 22:18:15,313 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:18:15,314 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:18:15,314 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:18:15,315 INFO L158 Benchmark]: Toolchain (without parser) took 26301.38ms. Allocated memory was 144.7MB in the beginning and 469.8MB in the end (delta: 325.1MB). Free memory was 96.9MB in the beginning and 422.5MB in the end (delta: -325.6MB). Peak memory consumption was 866.7kB. Max. memory is 16.1GB. [2023-11-21 22:18:15,315 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 144.7MB. Free memory is still 115.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:18:15,316 INFO L158 Benchmark]: CACSL2BoogieTranslator took 559.90ms. Allocated memory is still 144.7MB. Free memory was 96.9MB in the beginning and 77.1MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,316 INFO L158 Benchmark]: Boogie Procedure Inliner took 53.86ms. Allocated memory is still 144.7MB. Free memory was 77.1MB in the beginning and 74.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,317 INFO L158 Benchmark]: Boogie Preprocessor took 75.61ms. Allocated memory is still 144.7MB. Free memory was 74.7MB in the beginning and 72.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,318 INFO L158 Benchmark]: RCFGBuilder took 748.75ms. Allocated memory was 144.7MB in the beginning and 186.6MB in the end (delta: 41.9MB). Free memory was 72.2MB in the beginning and 133.9MB in the end (delta: -61.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,318 INFO L158 Benchmark]: TraceAbstraction took 24706.02ms. Allocated memory was 186.6MB in the beginning and 469.8MB in the end (delta: 283.1MB). Free memory was 132.9MB in the beginning and 430.9MB in the end (delta: -298.0MB). Peak memory consumption was 213.2MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,319 INFO L158 Benchmark]: Witness Printer took 148.80ms. Allocated memory is still 469.8MB. Free memory was 430.9MB in the beginning and 422.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-21 22:18:15,322 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 144.7MB. Free memory is still 115.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 559.90ms. Allocated memory is still 144.7MB. Free memory was 96.9MB in the beginning and 77.1MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 53.86ms. Allocated memory is still 144.7MB. Free memory was 77.1MB in the beginning and 74.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 75.61ms. Allocated memory is still 144.7MB. Free memory was 74.7MB in the beginning and 72.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 748.75ms. Allocated memory was 144.7MB in the beginning and 186.6MB in the end (delta: 41.9MB). Free memory was 72.2MB in the beginning and 133.9MB in the end (delta: -61.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * TraceAbstraction took 24706.02ms. Allocated memory was 186.6MB in the beginning and 469.8MB in the end (delta: 283.1MB). Free memory was 132.9MB in the beginning and 430.9MB in the end (delta: -298.0MB). Peak memory consumption was 213.2MB. Max. memory is 16.1GB. * Witness Printer took 148.80ms. Allocated memory is still 469.8MB. Free memory was 430.9MB in the beginning and 422.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] - GenericResultAtLocation [Line: 526]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [526] - GenericResultAtLocation [Line: 564]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [564] - GenericResultAtLocation [Line: 600]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [600] - GenericResultAtLocation [Line: 609]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [609] - GenericResultAtLocation [Line: 828]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] - GenericResultAtLocation [Line: 894]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [894] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 605]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 24.6s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2251 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2211 mSDsluCounter, 2429 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1888 mSDsCounter, 1126 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4175 IncrementalHoareTripleChecker+Invalid, 5301 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1126 mSolverCounterUnsat, 541 mSDtfsCounter, 4175 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 574 GetRequests, 347 SyntacticMatches, 3 SemanticMatches, 224 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2522 ImplicationChecksByTransitivity, 2.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2258occurred in iteration=10, InterpolantAutomatonStates: 191, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 11 MinimizatonAttempts, 783 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 2412 PreInvPairs, 2805 NumberOfFragments, 519 HoareAnnotationTreeSize, 2412 FomulaSimplifications, 57287 FormulaSimplificationTreeSizeReduction, 3.2s HoareSimplificationTime, 21 FomulaSimplificationsInter, 45289 FormulaSimplificationTreeSizeReductionInter, 6.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.6s InterpolantComputationTime, 551 NumberOfCodeBlocks, 551 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 625 ConstructedInterpolants, 0 QuantifiedInterpolants, 2118 SizeOfPredicates, 17 NumberOfNonLiveVariables, 725 ConjunctsInSsa, 46 ConjunctsInUnsatCore, 16 InterpolantComputations, 9 PerfectInterpolantSequences, 108/152 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: ((((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && ((0 < pumpRunning) || !((methaneLevelCritical == 0)))) && (tmp == 1)) || ((((waterLevel <= 1) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1))) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 617]: Loop Invariant Derived loop invariant: ((((1 < \old(waterLevel)) || ((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) || !((\old(waterLevel) == 2))) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-11-21 22:18:15,382 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ee13abbc-0b01-4b7a-888a-163273c34fa4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE