./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:07:04,689 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:07:04,806 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:07:04,816 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:07:04,817 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:07:04,853 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:07:04,854 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:07:04,855 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:07:04,856 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:07:04,861 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:07:04,861 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:07:04,862 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:07:04,862 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:07:04,864 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:07:04,865 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:07:04,865 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:07:04,865 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:07:04,866 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:07:04,866 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:07:04,867 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:07:04,867 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:07:04,868 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:07:04,868 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:07:04,868 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:07:04,869 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:07:04,869 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:07:04,869 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:07:04,870 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:07:04,871 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:07:04,871 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:07:04,872 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:07:04,872 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:07:04,873 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:07:04,873 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:07:04,873 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:07:04,873 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:07:04,874 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:07:04,874 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:07:04,874 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:07:04,874 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:07:04,875 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:07:04,875 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:07:04,875 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2023-11-21 22:07:05,169 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:07:05,202 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:07:05,205 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:07:05,206 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:07:05,206 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:07:05,208 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2023-11-21 22:07:08,490 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:07:08,804 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:07:08,805 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2023-11-21 22:07:08,823 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/data/d9d2a9e90/4150c5f72c154f3986f98da27daf85b4/FLAGc4307ff40 [2023-11-21 22:07:08,843 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/data/d9d2a9e90/4150c5f72c154f3986f98da27daf85b4 [2023-11-21 22:07:08,847 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:07:08,849 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:07:08,851 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:07:08,851 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:07:08,858 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:07:08,859 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:07:08" (1/1) ... [2023-11-21 22:07:08,860 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@51786ee5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:08, skipping insertion in model container [2023-11-21 22:07:08,860 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:07:08" (1/1) ... [2023-11-21 22:07:08,943 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:07:09,131 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2023-11-21 22:07:09,245 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:07:09,259 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:07:09,271 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2023-11-21 22:07:09,273 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [101] [2023-11-21 22:07:09,273 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [139] [2023-11-21 22:07:09,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [148] [2023-11-21 22:07:09,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] [2023-11-21 22:07:09,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [318] [2023-11-21 22:07:09,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] [2023-11-21 22:07:09,275 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [686] [2023-11-21 22:07:09,285 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2023-11-21 22:07:09,383 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:07:09,418 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:07:09,419 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09 WrapperNode [2023-11-21 22:07:09,419 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:07:09,421 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:07:09,421 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:07:09,421 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:07:09,432 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,461 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,502 INFO L138 Inliner]: procedures = 60, calls = 109, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 246 [2023-11-21 22:07:09,503 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:07:09,504 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:07:09,505 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:07:09,505 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:07:09,519 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,519 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,534 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,551 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:07:09,563 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,564 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,570 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,584 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,586 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,589 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,592 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:07:09,593 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:07:09,593 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:07:09,594 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:07:09,595 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (1/1) ... [2023-11-21 22:07:09,602 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:07:09,621 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:07:09,640 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:07:09,677 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:07:09,697 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:07:09,698 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:07:09,698 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:07:09,698 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:07:09,698 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:07:09,699 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:07:09,699 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:07:09,699 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:07:09,699 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:07:09,700 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:07:09,700 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:07:09,701 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:07:09,701 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:07:09,701 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-21 22:07:09,701 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-21 22:07:09,702 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-21 22:07:09,702 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-21 22:07:09,703 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:07:09,703 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:07:09,704 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:07:09,704 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:07:09,705 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:07:09,705 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:07:09,705 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:07:09,863 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:07:09,867 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:07:10,381 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:07:10,567 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:07:10,567 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:07:10,569 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:07:10 BoogieIcfgContainer [2023-11-21 22:07:10,570 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:07:10,572 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:07:10,573 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:07:10,577 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:07:10,577 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:07:08" (1/3) ... [2023-11-21 22:07:10,578 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1237ca82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:07:10, skipping insertion in model container [2023-11-21 22:07:10,578 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:07:09" (2/3) ... [2023-11-21 22:07:10,579 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1237ca82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:07:10, skipping insertion in model container [2023-11-21 22:07:10,579 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:07:10" (3/3) ... [2023-11-21 22:07:10,581 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2023-11-21 22:07:10,604 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:07:10,604 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:07:10,661 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:07:10,669 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5374a99e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:07:10,670 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:07:10,675 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-21 22:07:10,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-21 22:07:10,686 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:10,687 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:10,687 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:10,692 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:10,692 INFO L85 PathProgramCache]: Analyzing trace with hash -676805620, now seen corresponding path program 1 times [2023-11-21 22:07:10,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:10,702 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1251733216] [2023-11-21 22:07:10,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:10,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:10,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:10,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:10,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:10,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:07:10,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:10,943 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:10,943 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:10,943 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1251733216] [2023-11-21 22:07:10,944 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1251733216] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:10,944 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:10,945 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:07:10,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021016964] [2023-11-21 22:07:10,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:10,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:07:10,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:10,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:07:10,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:07:11,002 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:11,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:11,083 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2023-11-21 22:07:11,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:07:11,088 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-11-21 22:07:11,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:11,103 INFO L225 Difference]: With dead ends: 158 [2023-11-21 22:07:11,103 INFO L226 Difference]: Without dead ends: 75 [2023-11-21 22:07:11,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:07:11,115 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:11,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:07:11,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-21 22:07:11,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-21 22:07:11,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-21 22:07:11,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2023-11-21 22:07:11,177 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 21 [2023-11-21 22:07:11,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:11,178 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2023-11-21 22:07:11,178 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:11,179 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2023-11-21 22:07:11,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-21 22:07:11,182 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:11,182 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:11,182 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:07:11,183 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:11,183 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:11,184 INFO L85 PathProgramCache]: Analyzing trace with hash 370803939, now seen corresponding path program 1 times [2023-11-21 22:07:11,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:11,184 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [119665982] [2023-11-21 22:07:11,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:11,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:11,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:07:11,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:07:11,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,293 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:11,294 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:11,294 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [119665982] [2023-11-21 22:07:11,294 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [119665982] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:11,294 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:11,295 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:07:11,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956526351] [2023-11-21 22:07:11,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:11,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:07:11,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:11,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:07:11,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:07:11,298 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:11,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:11,356 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2023-11-21 22:07:11,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:07:11,358 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-21 22:07:11,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:11,360 INFO L225 Difference]: With dead ends: 122 [2023-11-21 22:07:11,360 INFO L226 Difference]: Without dead ends: 67 [2023-11-21 22:07:11,361 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:07:11,363 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:11,363 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:07:11,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-21 22:07:11,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-21 22:07:11,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-21 22:07:11,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2023-11-21 22:07:11,395 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 22 [2023-11-21 22:07:11,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:11,396 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2023-11-21 22:07:11,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:11,398 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2023-11-21 22:07:11,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-21 22:07:11,400 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:11,400 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:11,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:07:11,401 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:11,401 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:11,402 INFO L85 PathProgramCache]: Analyzing trace with hash -511106355, now seen corresponding path program 1 times [2023-11-21 22:07:11,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:11,402 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184305859] [2023-11-21 22:07:11,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:11,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:11,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:07:11,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-21 22:07:11,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:11,632 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:11,632 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:11,633 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184305859] [2023-11-21 22:07:11,633 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184305859] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:11,633 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:11,633 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:07:11,634 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423797159] [2023-11-21 22:07:11,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:11,634 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:07:11,634 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:11,635 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:07:11,635 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:07:11,636 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:07:11,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:11,779 INFO L93 Difference]: Finished difference Result 197 states and 261 transitions. [2023-11-21 22:07:11,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:07:11,780 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2023-11-21 22:07:11,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:11,783 INFO L225 Difference]: With dead ends: 197 [2023-11-21 22:07:11,784 INFO L226 Difference]: Without dead ends: 132 [2023-11-21 22:07:11,785 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:07:11,787 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 73 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:11,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 158 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:07:11,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2023-11-21 22:07:11,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 129. [2023-11-21 22:07:11,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 97 states have internal predecessors, (107), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2023-11-21 22:07:11,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 171 transitions. [2023-11-21 22:07:11,852 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 171 transitions. Word has length 25 [2023-11-21 22:07:11,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:11,853 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 171 transitions. [2023-11-21 22:07:11,853 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:07:11,853 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 171 transitions. [2023-11-21 22:07:11,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-21 22:07:11,856 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:11,856 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:11,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:07:11,857 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:11,858 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:11,859 INFO L85 PathProgramCache]: Analyzing trace with hash 1645399345, now seen corresponding path program 1 times [2023-11-21 22:07:11,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:11,860 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [890196313] [2023-11-21 22:07:11,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:11,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:11,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:07:12,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-21 22:07:12,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,056 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:07:12,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:12,057 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [890196313] [2023-11-21 22:07:12,058 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [890196313] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:12,058 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:12,058 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:07:12,058 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871865757] [2023-11-21 22:07:12,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:12,059 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:07:12,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:12,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:07:12,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:07:12,061 INFO L87 Difference]: Start difference. First operand 129 states and 171 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:12,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:12,334 INFO L93 Difference]: Finished difference Result 346 states and 467 transitions. [2023-11-21 22:07:12,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-21 22:07:12,335 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2023-11-21 22:07:12,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:12,339 INFO L225 Difference]: With dead ends: 346 [2023-11-21 22:07:12,339 INFO L226 Difference]: Without dead ends: 219 [2023-11-21 22:07:12,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:07:12,343 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 45 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:12,345 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 313 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:07:12,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2023-11-21 22:07:12,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 214. [2023-11-21 22:07:12,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 137 states have (on average 1.2919708029197081) internal successors, (177), 154 states have internal predecessors, (177), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2023-11-21 22:07:12,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 273 transitions. [2023-11-21 22:07:12,385 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 273 transitions. Word has length 28 [2023-11-21 22:07:12,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:12,386 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 273 transitions. [2023-11-21 22:07:12,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:07:12,387 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 273 transitions. [2023-11-21 22:07:12,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-21 22:07:12,389 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:12,390 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:12,390 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:07:12,390 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:12,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:12,391 INFO L85 PathProgramCache]: Analyzing trace with hash 639843662, now seen corresponding path program 1 times [2023-11-21 22:07:12,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:12,392 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882463833] [2023-11-21 22:07:12,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:12,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:12,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:07:12,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:07:12,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:12,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:12,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-21 22:07:12,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,798 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:12,799 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:12,799 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882463833] [2023-11-21 22:07:12,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882463833] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:12,801 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:12,801 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:07:12,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797276214] [2023-11-21 22:07:12,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:12,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:07:12,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:12,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:07:12,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:07:12,811 INFO L87 Difference]: Start difference. First operand 214 states and 273 transitions. Second operand has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 6 states have internal predecessors, (30), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:07:13,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:13,245 INFO L93 Difference]: Finished difference Result 642 states and 820 transitions. [2023-11-21 22:07:13,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:07:13,247 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 6 states have internal predecessors, (30), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 42 [2023-11-21 22:07:13,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:13,257 INFO L225 Difference]: With dead ends: 642 [2023-11-21 22:07:13,257 INFO L226 Difference]: Without dead ends: 430 [2023-11-21 22:07:13,259 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2023-11-21 22:07:13,260 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 170 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 237 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 237 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:13,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 283 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 237 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:07:13,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 430 states. [2023-11-21 22:07:13,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 430 to 420. [2023-11-21 22:07:13,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 420 states, 273 states have (on average 1.271062271062271) internal successors, (347), 301 states have internal predecessors, (347), 77 states have call successors, (77), 63 states have call predecessors, (77), 69 states have return successors, (107), 74 states have call predecessors, (107), 77 states have call successors, (107) [2023-11-21 22:07:13,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 420 states to 420 states and 531 transitions. [2023-11-21 22:07:13,377 INFO L78 Accepts]: Start accepts. Automaton has 420 states and 531 transitions. Word has length 42 [2023-11-21 22:07:13,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:13,378 INFO L495 AbstractCegarLoop]: Abstraction has 420 states and 531 transitions. [2023-11-21 22:07:13,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.285714285714286) internal successors, (30), 6 states have internal predecessors, (30), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-21 22:07:13,378 INFO L276 IsEmpty]: Start isEmpty. Operand 420 states and 531 transitions. [2023-11-21 22:07:13,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-21 22:07:13,385 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:13,386 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:13,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:07:13,386 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:13,387 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:13,387 INFO L85 PathProgramCache]: Analyzing trace with hash -562087292, now seen corresponding path program 1 times [2023-11-21 22:07:13,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:13,387 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509622955] [2023-11-21 22:07:13,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:13,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:13,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:07:13,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:07:13,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-21 22:07:13,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:13,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:13,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-21 22:07:13,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:13,772 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:13,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:13,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509622955] [2023-11-21 22:07:13,773 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509622955] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:13,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:13,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-21 22:07:13,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277805940] [2023-11-21 22:07:13,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:13,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:07:13,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:13,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:07:13,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:07:13,776 INFO L87 Difference]: Start difference. First operand 420 states and 531 transitions. Second operand has 9 states, 8 states have (on average 3.875) internal successors, (31), 7 states have internal predecessors, (31), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2023-11-21 22:07:14,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:14,588 INFO L93 Difference]: Finished difference Result 994 states and 1271 transitions. [2023-11-21 22:07:14,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-21 22:07:14,589 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.875) internal successors, (31), 7 states have internal predecessors, (31), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 45 [2023-11-21 22:07:14,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:14,595 INFO L225 Difference]: With dead ends: 994 [2023-11-21 22:07:14,595 INFO L226 Difference]: Without dead ends: 688 [2023-11-21 22:07:14,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 94 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=125, Invalid=381, Unknown=0, NotChecked=0, Total=506 [2023-11-21 22:07:14,598 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 357 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 387 mSolverCounterSat, 204 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 363 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 591 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 204 IncrementalHoareTripleChecker+Valid, 387 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:14,599 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [363 Valid, 281 Invalid, 591 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [204 Valid, 387 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:07:14,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 688 states. [2023-11-21 22:07:14,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 688 to 614. [2023-11-21 22:07:14,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 404 states have (on average 1.2648514851485149) internal successors, (511), 444 states have internal predecessors, (511), 110 states have call successors, (110), 82 states have call predecessors, (110), 99 states have return successors, (157), 113 states have call predecessors, (157), 110 states have call successors, (157) [2023-11-21 22:07:14,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 778 transitions. [2023-11-21 22:07:14,684 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 778 transitions. Word has length 45 [2023-11-21 22:07:14,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:14,685 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 778 transitions. [2023-11-21 22:07:14,686 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.875) internal successors, (31), 7 states have internal predecessors, (31), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2023-11-21 22:07:14,686 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 778 transitions. [2023-11-21 22:07:14,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2023-11-21 22:07:14,688 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:14,689 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:14,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:07:14,689 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:14,690 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:14,690 INFO L85 PathProgramCache]: Analyzing trace with hash -670576840, now seen corresponding path program 1 times [2023-11-21 22:07:14,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:14,691 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [164018472] [2023-11-21 22:07:14,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:14,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:14,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:07:14,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:07:14,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:07:14,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:14,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:14,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:14,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-21 22:07:14,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2023-11-21 22:07:14,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:14,815 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:07:14,815 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:14,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [164018472] [2023-11-21 22:07:14,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [164018472] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:14,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:14,816 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:07:14,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790413787] [2023-11-21 22:07:14,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:14,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:07:14,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:14,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:07:14,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:07:14,819 INFO L87 Difference]: Start difference. First operand 614 states and 778 transitions. Second operand has 7 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2023-11-21 22:07:15,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:15,213 INFO L93 Difference]: Finished difference Result 730 states and 923 transitions. [2023-11-21 22:07:15,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:07:15,214 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 66 [2023-11-21 22:07:15,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:15,217 INFO L225 Difference]: With dead ends: 730 [2023-11-21 22:07:15,217 INFO L226 Difference]: Without dead ends: 307 [2023-11-21 22:07:15,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:07:15,221 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 156 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 217 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 310 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 217 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:15,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 215 Invalid, 310 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 217 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:07:15,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2023-11-21 22:07:15,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 297. [2023-11-21 22:07:15,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 196 states have (on average 1.219387755102041) internal successors, (239), 214 states have internal predecessors, (239), 52 states have call successors, (52), 39 states have call predecessors, (52), 48 states have return successors, (75), 55 states have call predecessors, (75), 52 states have call successors, (75) [2023-11-21 22:07:15,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 366 transitions. [2023-11-21 22:07:15,271 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 366 transitions. Word has length 66 [2023-11-21 22:07:15,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:15,271 INFO L495 AbstractCegarLoop]: Abstraction has 297 states and 366 transitions. [2023-11-21 22:07:15,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2023-11-21 22:07:15,272 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 366 transitions. [2023-11-21 22:07:15,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2023-11-21 22:07:15,274 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:15,274 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:15,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:07:15,275 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:15,275 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:15,276 INFO L85 PathProgramCache]: Analyzing trace with hash 547092019, now seen corresponding path program 1 times [2023-11-21 22:07:15,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:15,276 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [222389921] [2023-11-21 22:07:15,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:15,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:15,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:07:15,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:07:15,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:07:15,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:15,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:15,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:15,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-21 22:07:15,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-21 22:07:15,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:15,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:15,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-21 22:07:15,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:15,867 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 18 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-21 22:07:15,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:15,867 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [222389921] [2023-11-21 22:07:15,867 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [222389921] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:07:15,868 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2118662007] [2023-11-21 22:07:15,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:15,868 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:07:15,868 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:07:15,871 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:07:15,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:07:16,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:16,012 INFO L262 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 18 conjunts are in the unsatisfiable core [2023-11-21 22:07:16,021 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:07:16,241 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:07:16,241 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:07:16,437 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-11-21 22:07:16,437 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2118662007] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:07:16,438 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:07:16,438 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 18 [2023-11-21 22:07:16,438 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [609159831] [2023-11-21 22:07:16,438 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:07:16,439 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2023-11-21 22:07:16,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:16,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2023-11-21 22:07:16,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=266, Unknown=0, NotChecked=0, Total=306 [2023-11-21 22:07:16,441 INFO L87 Difference]: Start difference. First operand 297 states and 366 transitions. Second operand has 18 states, 16 states have (on average 6.1875) internal successors, (99), 13 states have internal predecessors, (99), 5 states have call successors, (22), 7 states have call predecessors, (22), 6 states have return successors, (22), 8 states have call predecessors, (22), 5 states have call successors, (22) [2023-11-21 22:07:22,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:22,707 INFO L93 Difference]: Finished difference Result 2104 states and 2673 transitions. [2023-11-21 22:07:22,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 152 states. [2023-11-21 22:07:22,708 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 16 states have (on average 6.1875) internal successors, (99), 13 states have internal predecessors, (99), 5 states have call successors, (22), 7 states have call predecessors, (22), 6 states have return successors, (22), 8 states have call predecessors, (22), 5 states have call successors, (22) Word has length 80 [2023-11-21 22:07:22,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:22,722 INFO L225 Difference]: With dead ends: 2104 [2023-11-21 22:07:22,722 INFO L226 Difference]: Without dead ends: 1809 [2023-11-21 22:07:22,736 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 383 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9898 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=2640, Invalid=22800, Unknown=0, NotChecked=0, Total=25440 [2023-11-21 22:07:22,738 INFO L413 NwaCegarLoop]: 156 mSDtfsCounter, 787 mSDsluCounter, 1449 mSDsCounter, 0 mSdLazyCounter, 3141 mSolverCounterSat, 463 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 799 SdHoareTripleChecker+Valid, 1605 SdHoareTripleChecker+Invalid, 3604 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 463 IncrementalHoareTripleChecker+Valid, 3141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:22,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [799 Valid, 1605 Invalid, 3604 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [463 Valid, 3141 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2023-11-21 22:07:22,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1809 states. [2023-11-21 22:07:22,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1809 to 1285. [2023-11-21 22:07:22,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1285 states, 862 states have (on average 1.1821345707656612) internal successors, (1019), 926 states have internal predecessors, (1019), 213 states have call successors, (213), 178 states have call predecessors, (213), 209 states have return successors, (326), 218 states have call predecessors, (326), 213 states have call successors, (326) [2023-11-21 22:07:22,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1285 states to 1285 states and 1558 transitions. [2023-11-21 22:07:22,899 INFO L78 Accepts]: Start accepts. Automaton has 1285 states and 1558 transitions. Word has length 80 [2023-11-21 22:07:22,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:22,899 INFO L495 AbstractCegarLoop]: Abstraction has 1285 states and 1558 transitions. [2023-11-21 22:07:22,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 16 states have (on average 6.1875) internal successors, (99), 13 states have internal predecessors, (99), 5 states have call successors, (22), 7 states have call predecessors, (22), 6 states have return successors, (22), 8 states have call predecessors, (22), 5 states have call successors, (22) [2023-11-21 22:07:22,900 INFO L276 IsEmpty]: Start isEmpty. Operand 1285 states and 1558 transitions. [2023-11-21 22:07:22,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-11-21 22:07:22,904 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:22,904 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:22,935 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-21 22:07:23,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:07:23,125 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:23,126 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:23,126 INFO L85 PathProgramCache]: Analyzing trace with hash -1814173656, now seen corresponding path program 1 times [2023-11-21 22:07:23,126 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:23,126 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127830012] [2023-11-21 22:07:23,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:23,126 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:23,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:07:23,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:07:23,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:07:23,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:23,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:23,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:23,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-21 22:07:23,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-21 22:07:23,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-21 22:07:23,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:23,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:23,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-21 22:07:23,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,715 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 3 proven. 20 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-21 22:07:23,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:23,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127830012] [2023-11-21 22:07:23,715 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127830012] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:07:23,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2661209] [2023-11-21 22:07:23,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:23,716 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:07:23,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:07:23,719 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:07:23,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:07:23,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:23,823 INFO L262 TraceCheckSpWp]: Trace formula consists of 331 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-21 22:07:23,830 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:07:24,075 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:07:24,075 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:07:24,075 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2661209] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:24,075 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:07:24,076 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 19 [2023-11-21 22:07:24,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631937779] [2023-11-21 22:07:24,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:24,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:07:24,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:24,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:07:24,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=301, Unknown=0, NotChecked=0, Total=342 [2023-11-21 22:07:24,078 INFO L87 Difference]: Start difference. First operand 1285 states and 1558 transitions. Second operand has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2023-11-21 22:07:24,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:24,543 INFO L93 Difference]: Finished difference Result 2513 states and 3086 transitions. [2023-11-21 22:07:24,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-21 22:07:24,544 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) Word has length 84 [2023-11-21 22:07:24,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:24,558 INFO L225 Difference]: With dead ends: 2513 [2023-11-21 22:07:24,559 INFO L226 Difference]: Without dead ends: 1608 [2023-11-21 22:07:24,565 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 103 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=405, Unknown=0, NotChecked=0, Total=462 [2023-11-21 22:07:24,568 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 123 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 211 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 211 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:24,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 326 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 211 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:07:24,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2023-11-21 22:07:24,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 1351. [2023-11-21 22:07:24,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1351 states, 899 states have (on average 1.1790878754171301) internal successors, (1060), 969 states have internal predecessors, (1060), 228 states have call successors, (228), 194 states have call predecessors, (228), 223 states have return successors, (342), 226 states have call predecessors, (342), 228 states have call successors, (342) [2023-11-21 22:07:24,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1351 states to 1351 states and 1630 transitions. [2023-11-21 22:07:24,735 INFO L78 Accepts]: Start accepts. Automaton has 1351 states and 1630 transitions. Word has length 84 [2023-11-21 22:07:24,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:24,735 INFO L495 AbstractCegarLoop]: Abstraction has 1351 states and 1630 transitions. [2023-11-21 22:07:24,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 4 states have call successors, (13), 4 states have call predecessors, (13), 4 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2023-11-21 22:07:24,736 INFO L276 IsEmpty]: Start isEmpty. Operand 1351 states and 1630 transitions. [2023-11-21 22:07:24,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2023-11-21 22:07:24,743 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:24,743 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:24,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:07:24,956 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-21 22:07:24,956 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:24,957 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:24,957 INFO L85 PathProgramCache]: Analyzing trace with hash -1259919117, now seen corresponding path program 1 times [2023-11-21 22:07:24,957 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:24,957 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [435522040] [2023-11-21 22:07:24,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:24,957 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:24,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:07:25,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:07:25,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:07:25,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:25,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:25,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:25,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-21 22:07:25,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:07:25,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:07:25,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:07:25,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-21 22:07:25,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-21 22:07:25,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-21 22:07:25,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:07:25,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:07:25,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2023-11-21 22:07:25,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,251 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 42 proven. 1 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2023-11-21 22:07:25,251 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:25,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [435522040] [2023-11-21 22:07:25,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [435522040] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:07:25,252 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [613589666] [2023-11-21 22:07:25,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:25,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:07:25,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:07:25,253 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:07:25,268 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:07:25,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:25,390 INFO L262 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 26 conjunts are in the unsatisfiable core [2023-11-21 22:07:25,396 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:07:25,874 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 31 proven. 59 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:07:25,875 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:07:26,656 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 56 proven. 5 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2023-11-21 22:07:26,657 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [613589666] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:07:26,657 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:07:26,657 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 11] total 28 [2023-11-21 22:07:26,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342617431] [2023-11-21 22:07:26,657 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:07:26,658 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-11-21 22:07:26,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:26,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-11-21 22:07:26,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=647, Unknown=0, NotChecked=0, Total=756 [2023-11-21 22:07:26,660 INFO L87 Difference]: Start difference. First operand 1351 states and 1630 transitions. Second operand has 28 states, 27 states have (on average 6.592592592592593) internal successors, (178), 25 states have internal predecessors, (178), 14 states have call successors, (43), 8 states have call predecessors, (43), 11 states have return successors, (40), 15 states have call predecessors, (40), 13 states have call successors, (40) [2023-11-21 22:07:30,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:30,869 INFO L93 Difference]: Finished difference Result 2809 states and 3353 transitions. [2023-11-21 22:07:30,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2023-11-21 22:07:30,870 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 6.592592592592593) internal successors, (178), 25 states have internal predecessors, (178), 14 states have call successors, (43), 8 states have call predecessors, (43), 11 states have return successors, (40), 15 states have call predecessors, (40), 13 states have call successors, (40) Word has length 113 [2023-11-21 22:07:30,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:30,871 INFO L225 Difference]: With dead ends: 2809 [2023-11-21 22:07:30,872 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:07:30,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 375 GetRequests, 261 SyntacticMatches, 4 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3698 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=1593, Invalid=10839, Unknown=0, NotChecked=0, Total=12432 [2023-11-21 22:07:30,884 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 1033 mSDsluCounter, 748 mSDsCounter, 0 mSdLazyCounter, 2103 mSolverCounterSat, 719 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1033 SdHoareTripleChecker+Valid, 832 SdHoareTripleChecker+Invalid, 2822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 719 IncrementalHoareTripleChecker+Valid, 2103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:30,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1033 Valid, 832 Invalid, 2822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [719 Valid, 2103 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2023-11-21 22:07:30,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:07:30,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:07:30,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:07:30,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:07:30,886 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 113 [2023-11-21 22:07:30,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:30,887 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:07:30,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 6.592592592592593) internal successors, (178), 25 states have internal predecessors, (178), 14 states have call successors, (43), 8 states have call predecessors, (43), 11 states have return successors, (40), 15 states have call predecessors, (40), 13 states have call successors, (40) [2023-11-21 22:07:30,887 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:07:30,888 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:07:30,890 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:07:30,915 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:07:31,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-21 22:07:31,114 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:07:38,554 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2023-11-21 22:07:38,555 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0))))) [2023-11-21 22:07:38,555 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2023-11-21 22:07:38,555 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2023-11-21 22:07:38,555 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 (not .cse1) (= ~pumpRunning~0 0) .cse2) (or .cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1)) .cse2 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2023-11-21 22:07:38,555 INFO L899 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2023-11-21 22:07:38,556 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 390 414) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1)) .cse1 (not (= ~methaneLevelCritical~0 0))))) [2023-11-21 22:07:38,556 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1)) .cse1 (not (= ~methaneLevelCritical~0 0))))) [2023-11-21 22:07:38,558 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (and (not (= ~waterLevel~0 1)) (<= ~waterLevel~0 1)) .cse1 (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~4#1|))))) [2023-11-21 22:07:38,559 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2023-11-21 22:07:38,559 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2023-11-21 22:07:38,559 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2023-11-21 22:07:38,559 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2023-11-21 22:07:38,559 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 485 493) the Hoare annotation is: true [2023-11-21 22:07:38,560 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 610 621) the Hoare annotation is: (let ((.cse3 (= |old(~methaneLevelCritical~0)| 0)) (.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (not (= 2 ~waterLevel~0))) (.cse4 (not .cse6)) (.cse0 (not (= ~waterLevel~0 1))) (.cse5 (not .cse3)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7) (or .cse2 .cse7 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse6 .cse2)))) [2023-11-21 22:07:38,560 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2023-11-21 22:07:38,560 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2023-11-21 22:07:38,560 INFO L899 garLoopResultBuilder]: For program point L247(lines 222 251) no Hoare annotation was computed. [2023-11-21 22:07:38,560 INFO L899 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2023-11-21 22:07:38,560 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2023-11-21 22:07:38,561 INFO L902 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2023-11-21 22:07:38,561 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 222 251) the Hoare annotation is: true [2023-11-21 22:07:38,561 INFO L902 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2023-11-21 22:07:38,561 INFO L902 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2023-11-21 22:07:38,561 INFO L899 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2023-11-21 22:07:38,561 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-11-21 22:07:38,562 INFO L899 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2023-11-21 22:07:38,562 INFO L899 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2023-11-21 22:07:38,562 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 1))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (and .cse1 .cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse2) (or .cse0 .cse5 .cse3 .cse7) (or .cse3 .cse7 .cse4) (or .cse0 .cse4 .cse2)))) [2023-11-21 22:07:38,562 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2023-11-21 22:07:38,562 INFO L899 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2023-11-21 22:07:38,562 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2023-11-21 22:07:38,563 INFO L895 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~5#1| 0) (= ~waterLevel~0 1))) (or (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse0 (not (= 0 ~systemActive~0))))) [2023-11-21 22:07:38,563 INFO L895 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (not (= ~methaneLevelCritical~0 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) .cse1 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= 0 ~systemActive~0))))) [2023-11-21 22:07:38,563 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 329 355) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2))))) [2023-11-21 22:07:38,564 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~waterLevel~0 1)) .cse1 .cse2) (or .cse0 (not (= 0 ~systemActive~0))))) [2023-11-21 22:07:38,564 INFO L899 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2023-11-21 22:07:38,564 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2))))) [2023-11-21 22:07:38,564 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-11-21 22:07:38,564 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2023-11-21 22:07:38,565 INFO L895 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not .cse3))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse2 (not (= |old(~waterLevel~0)| 2)) (and .cse1 (= 2 ~waterLevel~0) .cse3)) (or .cse0 (not (= 0 ~systemActive~0)))))) [2023-11-21 22:07:38,565 INFO L899 garLoopResultBuilder]: For program point L435-1(lines 416 440) no Hoare annotation was computed. [2023-11-21 22:07:38,565 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2023-11-21 22:07:38,565 INFO L899 garLoopResultBuilder]: For program point L80-1(lines 72 100) no Hoare annotation was computed. [2023-11-21 22:07:38,565 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2023-11-21 22:07:38,565 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L899 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L899 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2023-11-21 22:07:38,566 INFO L895 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse3 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse3 .cse1 .cse2))) [2023-11-21 22:07:38,567 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse3 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse3 .cse1 .cse2))) [2023-11-21 22:07:38,567 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2023-11-21 22:07:38,567 INFO L899 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2023-11-21 22:07:38,567 INFO L899 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2023-11-21 22:07:38,567 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2023-11-21 22:07:38,568 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:07:38,568 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-21 22:07:38,568 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (= 0 ~systemActive~0)))) [2023-11-21 22:07:38,568 INFO L899 garLoopResultBuilder]: For program point L215(lines 154 219) no Hoare annotation was computed. [2023-11-21 22:07:38,568 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2023-11-21 22:07:38,568 INFO L899 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2023-11-21 22:07:38,569 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:07:38,569 INFO L895 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2023-11-21 22:07:38,569 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2023-11-21 22:07:38,569 INFO L895 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (= 0 ~systemActive~0)))) [2023-11-21 22:07:38,569 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 0) (or (= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)))) [2023-11-21 22:07:38,569 INFO L899 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2023-11-21 22:07:38,570 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2023-11-21 22:07:38,570 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 364 388) the Hoare annotation is: (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0))) [2023-11-21 22:07:38,570 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-21 22:07:38,570 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2023-11-21 22:07:38,570 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2023-11-21 22:07:38,570 INFO L895 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (not (= ~waterLevel~0 1)) (<= 1 ~waterLevel~0))) (or (< 2 ~waterLevel~0) .cse0 (= ~pumpRunning~0 0) .cse1))) [2023-11-21 22:07:38,571 INFO L899 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2023-11-21 22:07:38,571 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2023-11-21 22:07:38,571 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 598 609) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (not (= 0 ~systemActive~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1)) (or .cse1 .cse2 (and (<= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0)) .cse3))) [2023-11-21 22:07:38,571 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2023-11-21 22:07:38,571 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 484) the Hoare annotation is: true [2023-11-21 22:07:38,574 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:38,576 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:07:38,588 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:07:38 BoogieIcfgContainer [2023-11-21 22:07:38,589 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:07:38,589 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:07:38,589 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:07:38,590 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:07:38,590 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:07:10" (3/4) ... [2023-11-21 22:07:38,593 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:07:38,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:07:38,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:07:38,598 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:07:38,598 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-21 22:07:38,598 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-21 22:07:38,621 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2023-11-21 22:07:38,621 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-21 22:07:38,623 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:07:38,624 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:07:38,625 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:07:38,791 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:07:38,792 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:07:38,792 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:07:38,793 INFO L158 Benchmark]: Toolchain (without parser) took 29943.75ms. Allocated memory was 161.5MB in the beginning and 408.9MB in the end (delta: 247.5MB). Free memory was 114.7MB in the beginning and 209.2MB in the end (delta: -94.5MB). Peak memory consumption was 155.3MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,793 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 117.4MB. Free memory is still 67.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:07:38,794 INFO L158 Benchmark]: CACSL2BoogieTranslator took 568.83ms. Allocated memory is still 161.5MB. Free memory was 114.2MB in the beginning and 94.4MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,794 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.55ms. Allocated memory is still 161.5MB. Free memory was 94.4MB in the beginning and 91.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,794 INFO L158 Benchmark]: Boogie Preprocessor took 87.83ms. Allocated memory is still 161.5MB. Free memory was 91.9MB in the beginning and 89.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,795 INFO L158 Benchmark]: RCFGBuilder took 976.96ms. Allocated memory is still 161.5MB. Free memory was 89.8MB in the beginning and 115.9MB in the end (delta: -26.1MB). Peak memory consumption was 21.1MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,796 INFO L158 Benchmark]: TraceAbstraction took 28016.35ms. Allocated memory was 161.5MB in the beginning and 408.9MB in the end (delta: 247.5MB). Free memory was 114.8MB in the beginning and 216.6MB in the end (delta: -101.8MB). Peak memory consumption was 233.1MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,796 INFO L158 Benchmark]: Witness Printer took 202.81ms. Allocated memory is still 408.9MB. Free memory was 216.6MB in the beginning and 209.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-21 22:07:38,799 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 117.4MB. Free memory is still 67.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 568.83ms. Allocated memory is still 161.5MB. Free memory was 114.2MB in the beginning and 94.4MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.55ms. Allocated memory is still 161.5MB. Free memory was 94.4MB in the beginning and 91.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 87.83ms. Allocated memory is still 161.5MB. Free memory was 91.9MB in the beginning and 89.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 976.96ms. Allocated memory is still 161.5MB. Free memory was 89.8MB in the beginning and 115.9MB in the end (delta: -26.1MB). Peak memory consumption was 21.1MB. Max. memory is 16.1GB. * TraceAbstraction took 28016.35ms. Allocated memory was 161.5MB in the beginning and 408.9MB in the end (delta: 247.5MB). Free memory was 114.8MB in the beginning and 216.6MB in the end (delta: -101.8MB). Peak memory consumption was 233.1MB. Max. memory is 16.1GB. * Witness Printer took 202.81ms. Allocated memory is still 408.9MB. Free memory was 216.6MB in the beginning and 209.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [101] - GenericResultAtLocation [Line: 139]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [139] - GenericResultAtLocation [Line: 148]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [148] - GenericResultAtLocation [Line: 220]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [220] - GenericResultAtLocation [Line: 318]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [318] - GenericResultAtLocation [Line: 583]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [583] - GenericResultAtLocation [Line: 686]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [686] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 27.9s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 13.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2797 SdHoareTripleChecker+Valid, 5.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2758 mSDsluCounter, 4229 SdHoareTripleChecker+Invalid, 4.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3342 mSDsCounter, 1592 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6506 IncrementalHoareTripleChecker+Invalid, 8098 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1592 mSolverCounterUnsat, 887 mSDtfsCounter, 6506 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1002 GetRequests, 661 SyntacticMatches, 4 SemanticMatches, 337 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13741 ImplicationChecksByTransitivity, 6.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1351occurred in iteration=9, InterpolantAutomatonStates: 305, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 10 MinimizatonAttempts, 883 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 2264 PreInvPairs, 2404 NumberOfFragments, 1054 HoareAnnotationTreeSize, 2264 FomulaSimplifications, 40834 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 31 FomulaSimplificationsInter, 42448 FormulaSimplificationTreeSizeReductionInter, 6.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.7s InterpolantComputationTime, 803 NumberOfCodeBlocks, 803 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 981 ConstructedInterpolants, 0 QuantifiedInterpolants, 2731 SizeOfPredicates, 24 NumberOfNonLiveVariables, 1077 ConjunctsInSsa, 56 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 378/483 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) || ((((2 == waterLevel) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-21 22:07:38,852 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_af8a6792-aa60-4ee3-aa37-d5c6a575a23e/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE