./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 06:16:04,997 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 06:16:05,060 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 06:16:05,065 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 06:16:05,065 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 06:16:05,089 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 06:16:05,090 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 06:16:05,090 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 06:16:05,091 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 06:16:05,092 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 06:16:05,092 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 06:16:05,093 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 06:16:05,094 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 06:16:05,094 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 06:16:05,095 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 06:16:05,095 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 06:16:05,096 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 06:16:05,096 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 06:16:05,096 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 06:16:05,097 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 06:16:05,097 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 06:16:05,098 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 06:16:05,098 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 06:16:05,098 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 06:16:05,099 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 06:16:05,100 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 06:16:05,100 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 06:16:05,100 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 06:16:05,101 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 06:16:05,101 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 06:16:05,102 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 06:16:05,102 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:16:05,103 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 06:16:05,103 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 06:16:05,103 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 06:16:05,104 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 06:16:05,104 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 06:16:05,104 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 06:16:05,104 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 06:16:05,104 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 06:16:05,105 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 06:16:05,105 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 06:16:05,105 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 [2023-11-29 06:16:05,334 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 06:16:05,356 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 06:16:05,359 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 06:16:05,360 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 06:16:05,360 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 06:16:05,362 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2023-11-29 06:16:08,162 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 06:16:08,366 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 06:16:08,367 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2023-11-29 06:16:08,381 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/data/5a99c6bdb/06edc81d291c4bff86dc06f626e60609/FLAG462cc4bf8 [2023-11-29 06:16:08,393 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/data/5a99c6bdb/06edc81d291c4bff86dc06f626e60609 [2023-11-29 06:16:08,396 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 06:16:08,397 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 06:16:08,398 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 06:16:08,398 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 06:16:08,403 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 06:16:08,403 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,404 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b41465e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08, skipping insertion in model container [2023-11-29 06:16:08,404 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,449 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 06:16:08,676 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2023-11-29 06:16:08,697 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:16:08,707 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 06:16:08,715 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-29 06:16:08,716 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [415] [2023-11-29 06:16:08,716 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-11-29 06:16:08,716 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] [2023-11-29 06:16:08,717 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [664] [2023-11-29 06:16:08,717 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [699] [2023-11-29 06:16:08,717 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [708] [2023-11-29 06:16:08,717 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [776] [2023-11-29 06:16:08,767 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2023-11-29 06:16:08,776 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:16:08,794 INFO L206 MainTranslator]: Completed translation [2023-11-29 06:16:08,794 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08 WrapperNode [2023-11-29 06:16:08,794 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 06:16:08,795 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 06:16:08,795 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 06:16:08,796 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 06:16:08,801 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,815 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,841 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 213 [2023-11-29 06:16:08,842 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 06:16:08,843 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 06:16:08,843 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 06:16:08,843 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 06:16:08,852 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,853 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,855 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,871 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 06:16:08,872 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,872 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,878 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,883 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,884 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,886 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,889 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 06:16:08,890 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 06:16:08,890 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 06:16:08,891 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 06:16:08,892 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (1/1) ... [2023-11-29 06:16:08,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:16:08,906 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:16:08,919 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 06:16:08,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 06:16:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 06:16:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 06:16:08,965 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 06:16:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 06:16:08,965 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 06:16:08,966 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 06:16:08,966 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 06:16:08,966 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 06:16:08,966 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 06:16:08,966 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:16:08,966 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:16:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 06:16:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 06:16:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 06:16:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 06:16:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 06:16:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 06:16:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 06:16:09,047 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 06:16:09,049 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 06:16:09,275 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 06:16:09,334 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 06:16:09,334 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 06:16:09,335 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:16:09 BoogieIcfgContainer [2023-11-29 06:16:09,335 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 06:16:09,338 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 06:16:09,338 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 06:16:09,341 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 06:16:09,341 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 06:16:08" (1/3) ... [2023-11-29 06:16:09,342 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32cbc29b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:16:09, skipping insertion in model container [2023-11-29 06:16:09,342 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:16:08" (2/3) ... [2023-11-29 06:16:09,342 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32cbc29b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:16:09, skipping insertion in model container [2023-11-29 06:16:09,343 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:16:09" (3/3) ... [2023-11-29 06:16:09,344 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product50.cil.c [2023-11-29 06:16:09,360 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 06:16:09,360 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 06:16:09,404 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 06:16:09,410 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@540e94ce, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 06:16:09,410 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 06:16:09,414 INFO L276 IsEmpty]: Start isEmpty. Operand has 68 states, 48 states have (on average 1.5625) internal successors, (75), 56 states have internal predecessors, (75), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-29 06:16:09,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 06:16:09,422 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:09,423 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:09,423 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:09,428 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:09,428 INFO L85 PathProgramCache]: Analyzing trace with hash 732780293, now seen corresponding path program 1 times [2023-11-29 06:16:09,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:09,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2085208858] [2023-11-29 06:16:09,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:09,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:09,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:09,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:16:09,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:09,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:09,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:09,594 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2085208858] [2023-11-29 06:16:09,595 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2085208858] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:09,595 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:09,595 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 06:16:09,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1974940748] [2023-11-29 06:16:09,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:09,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 06:16:09,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:09,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 06:16:09,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:16:09,632 INFO L87 Difference]: Start difference. First operand has 68 states, 48 states have (on average 1.5625) internal successors, (75), 56 states have internal predecessors, (75), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:09,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:09,693 INFO L93 Difference]: Finished difference Result 134 states and 195 transitions. [2023-11-29 06:16:09,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 06:16:09,696 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 06:16:09,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:09,704 INFO L225 Difference]: With dead ends: 134 [2023-11-29 06:16:09,704 INFO L226 Difference]: Without dead ends: 63 [2023-11-29 06:16:09,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:16:09,712 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:09,713 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:16:09,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2023-11-29 06:16:09,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2023-11-29 06:16:09,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 52 states have internal predecessors, (65), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 06:16:09,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 86 transitions. [2023-11-29 06:16:09,754 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 86 transitions. Word has length 17 [2023-11-29 06:16:09,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:09,755 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 86 transitions. [2023-11-29 06:16:09,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:09,755 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 86 transitions. [2023-11-29 06:16:09,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-29 06:16:09,758 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:09,758 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:09,758 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 06:16:09,759 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:09,759 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:09,759 INFO L85 PathProgramCache]: Analyzing trace with hash -676741546, now seen corresponding path program 1 times [2023-11-29 06:16:09,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:09,760 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495754769] [2023-11-29 06:16:09,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:09,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:09,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:09,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 06:16:09,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:09,859 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:09,860 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:09,860 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495754769] [2023-11-29 06:16:09,860 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495754769] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:09,860 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:09,860 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:16:09,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617665930] [2023-11-29 06:16:09,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:09,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 06:16:09,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:09,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 06:16:09,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:16:09,863 INFO L87 Difference]: Start difference. First operand 63 states and 86 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:09,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:09,904 INFO L93 Difference]: Finished difference Result 99 states and 135 transitions. [2023-11-29 06:16:09,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 06:16:09,904 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-29 06:16:09,905 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:09,906 INFO L225 Difference]: With dead ends: 99 [2023-11-29 06:16:09,906 INFO L226 Difference]: Without dead ends: 55 [2023-11-29 06:16:09,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:16:09,909 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 11 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:09,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 111 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:16:09,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2023-11-29 06:16:09,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2023-11-29 06:16:09,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 40 states have (on average 1.475) internal successors, (59), 47 states have internal predecessors, (59), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-29 06:16:09,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 75 transitions. [2023-11-29 06:16:09,920 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 75 transitions. Word has length 18 [2023-11-29 06:16:09,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:09,920 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 75 transitions. [2023-11-29 06:16:09,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:09,921 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 75 transitions. [2023-11-29 06:16:09,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 06:16:09,922 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:09,922 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:09,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 06:16:09,923 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:09,923 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:09,923 INFO L85 PathProgramCache]: Analyzing trace with hash 857570252, now seen corresponding path program 1 times [2023-11-29 06:16:09,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:09,924 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [110034014] [2023-11-29 06:16:09,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:09,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:09,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:10,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,030 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:10,031 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:10,031 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [110034014] [2023-11-29 06:16:10,031 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [110034014] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:10,032 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:10,032 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 06:16:10,032 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553934754] [2023-11-29 06:16:10,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:10,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:16:10,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:10,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:16:10,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 06:16:10,035 INFO L87 Difference]: Start difference. First operand 55 states and 75 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:10,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:10,102 INFO L93 Difference]: Finished difference Result 108 states and 149 transitions. [2023-11-29 06:16:10,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 06:16:10,102 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-29 06:16:10,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:10,104 INFO L225 Difference]: With dead ends: 108 [2023-11-29 06:16:10,104 INFO L226 Difference]: Without dead ends: 55 [2023-11-29 06:16:10,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:16:10,106 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 81 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:10,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 104 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:16:10,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2023-11-29 06:16:10,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2023-11-29 06:16:10,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 40 states have (on average 1.45) internal successors, (58), 47 states have internal predecessors, (58), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-29 06:16:10,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 74 transitions. [2023-11-29 06:16:10,123 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 74 transitions. Word has length 21 [2023-11-29 06:16:10,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:10,124 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 74 transitions. [2023-11-29 06:16:10,124 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:10,124 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 74 transitions. [2023-11-29 06:16:10,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 06:16:10,125 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:10,125 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:10,126 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 06:16:10,126 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:10,126 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:10,126 INFO L85 PathProgramCache]: Analyzing trace with hash 1782623785, now seen corresponding path program 1 times [2023-11-29 06:16:10,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:10,127 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1874218091] [2023-11-29 06:16:10,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:10,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:10,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 06:16:10,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,206 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:10,206 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:10,206 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1874218091] [2023-11-29 06:16:10,206 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1874218091] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:10,207 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:10,207 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:16:10,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [221096104] [2023-11-29 06:16:10,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:10,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 06:16:10,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:10,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 06:16:10,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:16:10,209 INFO L87 Difference]: Start difference. First operand 55 states and 74 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:10,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:10,268 INFO L93 Difference]: Finished difference Result 147 states and 201 transitions. [2023-11-29 06:16:10,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 06:16:10,268 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-29 06:16:10,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:10,270 INFO L225 Difference]: With dead ends: 147 [2023-11-29 06:16:10,270 INFO L226 Difference]: Without dead ends: 94 [2023-11-29 06:16:10,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:16:10,273 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 48 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:10,274 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 119 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:16:10,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-11-29 06:16:10,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 92. [2023-11-29 06:16:10,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.4029850746268657) internal successors, (94), 74 states have internal predecessors, (94), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2023-11-29 06:16:10,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 122 transitions. [2023-11-29 06:16:10,292 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 122 transitions. Word has length 26 [2023-11-29 06:16:10,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:10,293 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 122 transitions. [2023-11-29 06:16:10,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:16:10,293 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 122 transitions. [2023-11-29 06:16:10,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 06:16:10,295 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:10,295 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:10,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 06:16:10,295 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:10,296 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:10,296 INFO L85 PathProgramCache]: Analyzing trace with hash -1898366738, now seen corresponding path program 1 times [2023-11-29 06:16:10,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:10,296 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812615121] [2023-11-29 06:16:10,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:10,297 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:10,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:10,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 06:16:10,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,419 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:10,419 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:10,420 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812615121] [2023-11-29 06:16:10,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1812615121] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:10,420 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:10,420 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 06:16:10,420 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2042687174] [2023-11-29 06:16:10,420 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:10,421 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 06:16:10,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:10,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 06:16:10,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:16:10,422 INFO L87 Difference]: Start difference. First operand 92 states and 122 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:10,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:10,614 INFO L93 Difference]: Finished difference Result 214 states and 294 transitions. [2023-11-29 06:16:10,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 06:16:10,615 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 06:16:10,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:10,617 INFO L225 Difference]: With dead ends: 214 [2023-11-29 06:16:10,617 INFO L226 Difference]: Without dead ends: 124 [2023-11-29 06:16:10,619 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2023-11-29 06:16:10,620 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 67 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:10,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 221 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:16:10,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-11-29 06:16:10,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 114. [2023-11-29 06:16:10,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 84 states have (on average 1.3928571428571428) internal successors, (117), 91 states have internal predecessors, (117), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2023-11-29 06:16:10,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 152 transitions. [2023-11-29 06:16:10,640 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 152 transitions. Word has length 33 [2023-11-29 06:16:10,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:10,641 INFO L495 AbstractCegarLoop]: Abstraction has 114 states and 152 transitions. [2023-11-29 06:16:10,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:10,641 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 152 transitions. [2023-11-29 06:16:10,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 06:16:10,643 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:10,643 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:10,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 06:16:10,643 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:10,644 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:10,644 INFO L85 PathProgramCache]: Analyzing trace with hash -618503060, now seen corresponding path program 1 times [2023-11-29 06:16:10,644 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:10,645 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1230602565] [2023-11-29 06:16:10,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:10,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:10,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:10,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 06:16:10,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:10,710 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:10,710 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1230602565] [2023-11-29 06:16:10,710 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1230602565] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:10,710 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:10,710 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 06:16:10,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332827512] [2023-11-29 06:16:10,711 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:10,711 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 06:16:10,711 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:10,712 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 06:16:10,712 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:16:10,712 INFO L87 Difference]: Start difference. First operand 114 states and 152 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:10,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:10,842 INFO L93 Difference]: Finished difference Result 230 states and 310 transitions. [2023-11-29 06:16:10,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 06:16:10,843 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 06:16:10,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:10,845 INFO L225 Difference]: With dead ends: 230 [2023-11-29 06:16:10,845 INFO L226 Difference]: Without dead ends: 118 [2023-11-29 06:16:10,846 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 06:16:10,847 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 47 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:10,848 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 179 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:16:10,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2023-11-29 06:16:10,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 116. [2023-11-29 06:16:10,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 86 states have (on average 1.3837209302325582) internal successors, (119), 93 states have internal predecessors, (119), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2023-11-29 06:16:10,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 154 transitions. [2023-11-29 06:16:10,864 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 154 transitions. Word has length 33 [2023-11-29 06:16:10,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:10,865 INFO L495 AbstractCegarLoop]: Abstraction has 116 states and 154 transitions. [2023-11-29 06:16:10,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:10,865 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 154 transitions. [2023-11-29 06:16:10,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 06:16:10,866 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:10,866 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:10,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 06:16:10,867 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:10,867 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:10,868 INFO L85 PathProgramCache]: Analyzing trace with hash 808252656, now seen corresponding path program 1 times [2023-11-29 06:16:10,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:10,868 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105822319] [2023-11-29 06:16:10,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:10,868 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:10,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:10,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 06:16:10,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:10,935 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:10,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:10,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105822319] [2023-11-29 06:16:10,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105822319] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:10,936 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:10,936 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 06:16:10,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2074630984] [2023-11-29 06:16:10,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:10,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 06:16:10,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:10,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 06:16:10,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:16:10,938 INFO L87 Difference]: Start difference. First operand 116 states and 154 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:11,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:11,175 INFO L93 Difference]: Finished difference Result 343 states and 469 transitions. [2023-11-29 06:16:11,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 06:16:11,177 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 06:16:11,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:11,179 INFO L225 Difference]: With dead ends: 343 [2023-11-29 06:16:11,179 INFO L226 Difference]: Without dead ends: 229 [2023-11-29 06:16:11,180 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 06:16:11,181 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 179 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:11,181 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 189 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 06:16:11,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2023-11-29 06:16:11,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 221. [2023-11-29 06:16:11,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 162 states have (on average 1.3395061728395061) internal successors, (217), 173 states have internal predecessors, (217), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2023-11-29 06:16:11,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 294 transitions. [2023-11-29 06:16:11,212 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 294 transitions. Word has length 33 [2023-11-29 06:16:11,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:11,212 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 294 transitions. [2023-11-29 06:16:11,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:16:11,213 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 294 transitions. [2023-11-29 06:16:11,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-11-29 06:16:11,214 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:11,214 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:11,214 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 06:16:11,215 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:11,215 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:11,215 INFO L85 PathProgramCache]: Analyzing trace with hash 1641981339, now seen corresponding path program 1 times [2023-11-29 06:16:11,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:11,215 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [94283094] [2023-11-29 06:16:11,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:11,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:11,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:11,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:16:11,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-29 06:16:11,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:11,296 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:11,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [94283094] [2023-11-29 06:16:11,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [94283094] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:11,296 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:11,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 06:16:11,296 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [859952916] [2023-11-29 06:16:11,297 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:11,297 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 06:16:11,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:11,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 06:16:11,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:16:11,298 INFO L87 Difference]: Start difference. First operand 221 states and 294 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:16:11,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:11,464 INFO L93 Difference]: Finished difference Result 442 states and 587 transitions. [2023-11-29 06:16:11,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-29 06:16:11,465 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 36 [2023-11-29 06:16:11,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:11,468 INFO L225 Difference]: With dead ends: 442 [2023-11-29 06:16:11,468 INFO L226 Difference]: Without dead ends: 223 [2023-11-29 06:16:11,469 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 06:16:11,470 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 91 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:11,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 156 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:16:11,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2023-11-29 06:16:11,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 220. [2023-11-29 06:16:11,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 220 states, 161 states have (on average 1.329192546583851) internal successors, (214), 172 states have internal predecessors, (214), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2023-11-29 06:16:11,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 220 states to 220 states and 291 transitions. [2023-11-29 06:16:11,499 INFO L78 Accepts]: Start accepts. Automaton has 220 states and 291 transitions. Word has length 36 [2023-11-29 06:16:11,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:11,499 INFO L495 AbstractCegarLoop]: Abstraction has 220 states and 291 transitions. [2023-11-29 06:16:11,499 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:16:11,500 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 291 transitions. [2023-11-29 06:16:11,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-29 06:16:11,501 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:11,501 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:11,501 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 06:16:11,501 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:11,502 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:11,502 INFO L85 PathProgramCache]: Analyzing trace with hash -1398682678, now seen corresponding path program 1 times [2023-11-29 06:16:11,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:11,502 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326491252] [2023-11-29 06:16:11,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:11,502 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:11,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:16:11,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 06:16:11,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 06:16:11,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:11,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:11,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:11,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326491252] [2023-11-29 06:16:11,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326491252] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:11,585 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:11,585 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 06:16:11,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086706954] [2023-11-29 06:16:11,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:11,586 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 06:16:11,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:11,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 06:16:11,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:16:11,587 INFO L87 Difference]: Start difference. First operand 220 states and 291 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:16:11,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:11,906 INFO L93 Difference]: Finished difference Result 431 states and 578 transitions. [2023-11-29 06:16:11,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-29 06:16:11,908 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 37 [2023-11-29 06:16:11,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:11,910 INFO L225 Difference]: With dead ends: 431 [2023-11-29 06:16:11,910 INFO L226 Difference]: Without dead ends: 254 [2023-11-29 06:16:11,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2023-11-29 06:16:11,912 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 166 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 232 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:11,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 232 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 06:16:11,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2023-11-29 06:16:11,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 247. [2023-11-29 06:16:11,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 182 states have (on average 1.2967032967032968) internal successors, (236), 196 states have internal predecessors, (236), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2023-11-29 06:16:11,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 312 transitions. [2023-11-29 06:16:11,941 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 312 transitions. Word has length 37 [2023-11-29 06:16:11,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:11,941 INFO L495 AbstractCegarLoop]: Abstraction has 247 states and 312 transitions. [2023-11-29 06:16:11,941 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:16:11,941 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 312 transitions. [2023-11-29 06:16:11,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-11-29 06:16:11,942 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:11,942 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:11,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 06:16:11,943 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:11,943 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:11,943 INFO L85 PathProgramCache]: Analyzing trace with hash -620979843, now seen corresponding path program 1 times [2023-11-29 06:16:11,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:11,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862383182] [2023-11-29 06:16:11,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:11,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:11,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:16:12,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 06:16:12,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:16:12,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-29 06:16:12,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,045 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:12,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:12,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862383182] [2023-11-29 06:16:12,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862383182] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:12,046 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:12,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 06:16:12,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304393619] [2023-11-29 06:16:12,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:12,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 06:16:12,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:12,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 06:16:12,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-29 06:16:12,048 INFO L87 Difference]: Start difference. First operand 247 states and 312 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:16:12,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:12,293 INFO L93 Difference]: Finished difference Result 453 states and 579 transitions. [2023-11-29 06:16:12,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 06:16:12,294 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 40 [2023-11-29 06:16:12,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:12,296 INFO L225 Difference]: With dead ends: 453 [2023-11-29 06:16:12,296 INFO L226 Difference]: Without dead ends: 251 [2023-11-29 06:16:12,297 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2023-11-29 06:16:12,298 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 119 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 271 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:12,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 185 Invalid, 271 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 06:16:12,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2023-11-29 06:16:12,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 247. [2023-11-29 06:16:12,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 182 states have (on average 1.2912087912087913) internal successors, (235), 196 states have internal predecessors, (235), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2023-11-29 06:16:12,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 311 transitions. [2023-11-29 06:16:12,323 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 311 transitions. Word has length 40 [2023-11-29 06:16:12,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:12,323 INFO L495 AbstractCegarLoop]: Abstraction has 247 states and 311 transitions. [2023-11-29 06:16:12,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:16:12,324 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 311 transitions. [2023-11-29 06:16:12,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-11-29 06:16:12,324 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:12,324 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:12,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-29 06:16:12,325 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:12,325 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:12,325 INFO L85 PathProgramCache]: Analyzing trace with hash 1373164863, now seen corresponding path program 1 times [2023-11-29 06:16:12,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:12,325 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505099643] [2023-11-29 06:16:12,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:12,326 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:12,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:16:12,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 06:16:12,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:16:12,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-29 06:16:12,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:16:12,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:12,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505099643] [2023-11-29 06:16:12,393 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505099643] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:16:12,394 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:16:12,394 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 06:16:12,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289830440] [2023-11-29 06:16:12,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:16:12,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 06:16:12,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:12,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 06:16:12,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:16:12,395 INFO L87 Difference]: Start difference. First operand 247 states and 311 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:16:12,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:12,606 INFO L93 Difference]: Finished difference Result 430 states and 547 transitions. [2023-11-29 06:16:12,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 06:16:12,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 40 [2023-11-29 06:16:12,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:12,609 INFO L225 Difference]: With dead ends: 430 [2023-11-29 06:16:12,610 INFO L226 Difference]: Without dead ends: 228 [2023-11-29 06:16:12,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2023-11-29 06:16:12,611 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 106 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:12,611 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 175 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:16:12,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2023-11-29 06:16:12,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 224. [2023-11-29 06:16:12,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 166 states have (on average 1.2891566265060241) internal successors, (214), 179 states have internal predecessors, (214), 29 states have call successors, (29), 25 states have call predecessors, (29), 28 states have return successors, (37), 28 states have call predecessors, (37), 29 states have call successors, (37) [2023-11-29 06:16:12,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 280 transitions. [2023-11-29 06:16:12,628 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 280 transitions. Word has length 40 [2023-11-29 06:16:12,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:12,629 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 280 transitions. [2023-11-29 06:16:12,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:16:12,629 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 280 transitions. [2023-11-29 06:16:12,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-11-29 06:16:12,630 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:16:12,630 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:12,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-29 06:16:12,630 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:16:12,631 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:16:12,631 INFO L85 PathProgramCache]: Analyzing trace with hash -136694335, now seen corresponding path program 1 times [2023-11-29 06:16:12,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:16:12,631 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1019577551] [2023-11-29 06:16:12,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:12,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:16:12,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:16:12,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:16:12,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:16:12,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 06:16:12,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-29 06:16:12,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,712 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-29 06:16:12,712 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:16:12,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1019577551] [2023-11-29 06:16:12,712 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1019577551] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:16:12,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1845084345] [2023-11-29 06:16:12,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:16:12,712 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:16:12,713 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:16:12,716 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:16:12,717 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 06:16:12,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:16:12,813 INFO L262 TraceCheckSpWp]: Trace formula consists of 263 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-29 06:16:12,820 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:16:12,980 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 11 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 06:16:12,980 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 06:16:13,256 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 06:16:13,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1845084345] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 06:16:13,257 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 06:16:13,257 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 8] total 15 [2023-11-29 06:16:13,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1436996789] [2023-11-29 06:16:13,257 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 06:16:13,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-29 06:16:13,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:16:13,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-29 06:16:13,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=158, Unknown=0, NotChecked=0, Total=210 [2023-11-29 06:16:13,259 INFO L87 Difference]: Start difference. First operand 224 states and 280 transitions. Second operand has 15 states, 15 states have (on average 6.0) internal successors, (90), 11 states have internal predecessors, (90), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2023-11-29 06:16:13,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:16:13,705 INFO L93 Difference]: Finished difference Result 433 states and 570 transitions. [2023-11-29 06:16:13,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-29 06:16:13,706 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 11 states have internal predecessors, (90), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) Word has length 62 [2023-11-29 06:16:13,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:16:13,707 INFO L225 Difference]: With dead ends: 433 [2023-11-29 06:16:13,707 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 06:16:13,709 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 123 SyntacticMatches, 6 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=266, Invalid=604, Unknown=0, NotChecked=0, Total=870 [2023-11-29 06:16:13,710 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 328 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 330 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 06:16:13,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [330 Valid, 198 Invalid, 426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 06:16:13,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 06:16:13,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 06:16:13,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:16:13,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 06:16:13,711 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 62 [2023-11-29 06:16:13,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:16:13,711 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 06:16:13,712 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 11 states have internal predecessors, (90), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2023-11-29 06:16:13,712 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 06:16:13,712 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 06:16:13,714 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 06:16:13,726 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 06:16:13,915 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:16:13,917 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 06:16:14,967 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 806 812) no Hoare annotation was computed. [2023-11-29 06:16:14,967 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 806 812) the Hoare annotation is: true [2023-11-29 06:16:14,967 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-11-29 06:16:14,967 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2023-11-29 06:16:14,967 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L704(line 704) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L965(lines 965 969) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L965-2(lines 965 969) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L895 garLoopResultBuilder]: At program point L854(line 854) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))))) [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L466-2(lines 462 473) no Hoare annotation was computed. [2023-11-29 06:16:14,968 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 449) no Hoare annotation was computed. [2023-11-29 06:16:14,969 INFO L895 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1))) [2023-11-29 06:16:14,969 INFO L899 garLoopResultBuilder]: For program point L859-1(lines 840 864) no Hoare annotation was computed. [2023-11-29 06:16:14,969 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 793 799) no Hoare annotation was computed. [2023-11-29 06:16:14,969 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 782 805) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1))) [2023-11-29 06:16:14,969 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 445) no Hoare annotation was computed. [2023-11-29 06:16:14,969 INFO L899 garLoopResultBuilder]: For program point L435(lines 435 448) no Hoare annotation was computed. [2023-11-29 06:16:14,969 INFO L899 garLoopResultBuilder]: For program point L435-1(lines 420 452) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point L786-1(lines 785 804) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 856) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point L844(lines 844 861) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 1)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0) (not (= |old(~pumpRunning~0)| 0)) .cse4 .cse5)) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse3 .cse6 .cse1) (not (= |old(~pumpRunning~0)| 1)) (and .cse2 .cse3 .cse6) .cse4 .cse5)))) [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 782 805) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point L427-1(line 427) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2023-11-29 06:16:14,970 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 565 594) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L902 garLoopResultBuilder]: At program point L575-2(lines 575 589) the Hoare annotation is: true [2023-11-29 06:16:14,971 INFO L902 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: true [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point L571-1(line 571) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point L590(lines 565 594) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point L586(line 586) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 594) the Hoare annotation is: true [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L902 garLoopResultBuilder]: At program point L579-1(lines 579 583) the Hoare annotation is: true [2023-11-29 06:16:14,971 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 498 506) the Hoare annotation is: true [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 498 506) no Hoare annotation was computed. [2023-11-29 06:16:14,971 INFO L899 garLoopResultBuilder]: For program point L758(lines 758 762) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L895 garLoopResultBuilder]: At program point L758-2(lines 750 763) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)))) [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L721(lines 720 767) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L750(lines 750 763) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L651(lines 651 658) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L651-2(lines 651 658) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)))) [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L771(lines 710 775) no Hoare annotation was computed. [2023-11-29 06:16:14,972 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 736) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L899 garLoopResultBuilder]: For program point L730-1(lines 730 736) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L895 garLoopResultBuilder]: At program point L768(lines 719 769) the Hoare annotation is: false [2023-11-29 06:16:14,973 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 740 746) no Hoare annotation was computed. [2023-11-29 06:16:14,973 INFO L895 garLoopResultBuilder]: At program point L765(lines 720 767) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse4 .cse0 .cse1 .cse2) (and .cse4 .cse0 .cse1 .cse2 .cse3))) [2023-11-29 06:16:14,973 INFO L895 garLoopResultBuilder]: At program point L732(line 732) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0 1)) (.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse4 .cse0 .cse1 .cse2) (and .cse4 .cse0 .cse1 .cse2 .cse3))) [2023-11-29 06:16:14,974 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 549) no Hoare annotation was computed. [2023-11-29 06:16:14,974 INFO L895 garLoopResultBuilder]: At program point L828(line 828) the Hoare annotation is: (let ((.cse0 (< 1 ~waterLevel~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) .cse2 .cse0 .cse1) (or (< 2 ~waterLevel~0) .cse2 (< ~waterLevel~0 2) .cse1))) [2023-11-29 06:16:14,974 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 830) no Hoare annotation was computed. [2023-11-29 06:16:14,974 INFO L899 garLoopResultBuilder]: For program point L818(lines 818 835) no Hoare annotation was computed. [2023-11-29 06:16:14,974 INFO L899 garLoopResultBuilder]: For program point L946(lines 946 950) no Hoare annotation was computed. [2023-11-29 06:16:14,974 INFO L899 garLoopResultBuilder]: For program point L946-2(lines 946 950) no Hoare annotation was computed. [2023-11-29 06:16:14,974 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 814 838) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-29 06:16:14,975 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 539 552) no Hoare annotation was computed. [2023-11-29 06:16:14,975 INFO L895 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) .cse0 (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-29 06:16:14,975 INFO L899 garLoopResultBuilder]: For program point L833-1(lines 814 838) no Hoare annotation was computed. [2023-11-29 06:16:14,975 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 814 838) no Hoare annotation was computed. [2023-11-29 06:16:14,975 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-11-29 06:16:14,975 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2023-11-29 06:16:14,975 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 1)) .cse0 .cse1 (< 2 |old(~waterLevel~0)|)))) [2023-11-29 06:16:14,978 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:16:14,979 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 06:16:14,989 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 06:16:14 BoogieIcfgContainer [2023-11-29 06:16:14,989 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 06:16:14,990 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 06:16:14,990 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 06:16:14,990 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 06:16:14,990 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:16:09" (3/4) ... [2023-11-29 06:16:14,992 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 06:16:14,994 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 06:16:14,994 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 06:16:14,994 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 06:16:14,994 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 06:16:14,995 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 06:16:14,995 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:16:14,995 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 06:16:15,001 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 06:16:15,002 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 06:16:15,002 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 06:16:15,002 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:16:15,003 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:16:15,110 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 06:16:15,111 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 06:16:15,111 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 06:16:15,112 INFO L158 Benchmark]: Toolchain (without parser) took 6715.06ms. Allocated memory was 153.1MB in the beginning and 199.2MB in the end (delta: 46.1MB). Free memory was 105.3MB in the beginning and 147.6MB in the end (delta: -42.3MB). Peak memory consumption was 4.7MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,113 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 100.7MB. Free memory was 52.4MB in the beginning and 52.3MB in the end (delta: 142.7kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 06:16:15,113 INFO L158 Benchmark]: CACSL2BoogieTranslator took 396.54ms. Allocated memory is still 153.1MB. Free memory was 105.3MB in the beginning and 85.6MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,113 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.62ms. Allocated memory is still 153.1MB. Free memory was 85.6MB in the beginning and 83.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,114 INFO L158 Benchmark]: Boogie Preprocessor took 46.90ms. Allocated memory is still 153.1MB. Free memory was 83.5MB in the beginning and 81.0MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,114 INFO L158 Benchmark]: RCFGBuilder took 444.51ms. Allocated memory was 153.1MB in the beginning and 199.2MB in the end (delta: 46.1MB). Free memory was 81.0MB in the beginning and 153.1MB in the end (delta: -72.1MB). Peak memory consumption was 8.5MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,115 INFO L158 Benchmark]: TraceAbstraction took 5651.86ms. Allocated memory is still 199.2MB. Free memory was 152.2MB in the beginning and 155.0MB in the end (delta: -2.8MB). Peak memory consumption was 102.0MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,115 INFO L158 Benchmark]: Witness Printer took 121.77ms. Allocated memory is still 199.2MB. Free memory was 155.0MB in the beginning and 147.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 06:16:15,117 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 100.7MB. Free memory was 52.4MB in the beginning and 52.3MB in the end (delta: 142.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 396.54ms. Allocated memory is still 153.1MB. Free memory was 105.3MB in the beginning and 85.6MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.62ms. Allocated memory is still 153.1MB. Free memory was 85.6MB in the beginning and 83.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.90ms. Allocated memory is still 153.1MB. Free memory was 83.5MB in the beginning and 81.0MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 444.51ms. Allocated memory was 153.1MB in the beginning and 199.2MB in the end (delta: 46.1MB). Free memory was 81.0MB in the beginning and 153.1MB in the end (delta: -72.1MB). Peak memory consumption was 8.5MB. Max. memory is 16.1GB. * TraceAbstraction took 5651.86ms. Allocated memory is still 199.2MB. Free memory was 152.2MB in the beginning and 155.0MB in the end (delta: -2.8MB). Peak memory consumption was 102.0MB. Max. memory is 16.1GB. * Witness Printer took 121.77ms. Allocated memory is still 199.2MB. Free memory was 155.0MB in the beginning and 147.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [415] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 562]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] - GenericResultAtLocation [Line: 664]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [664] - GenericResultAtLocation [Line: 699]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [699] - GenericResultAtLocation [Line: 708]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [708] - GenericResultAtLocation [Line: 776]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [776] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 704]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 68 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.6s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1279 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1243 mSDsluCounter, 1945 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1247 mSDsCounter, 304 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1710 IncrementalHoareTripleChecker+Invalid, 2014 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 304 mSolverCounterUnsat, 698 mSDtfsCounter, 1710 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 287 GetRequests, 198 SyntacticMatches, 6 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 175 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=247occurred in iteration=9, InterpolantAutomatonStates: 86, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 40 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 448 PreInvPairs, 497 NumberOfFragments, 510 HoareAnnotationTreeSize, 448 FomulaSimplifications, 165 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 1570 FormulaSimplificationTreeSizeReductionInter, 1.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 458 NumberOfCodeBlocks, 458 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 506 ConstructedInterpolants, 0 QuantifiedInterpolants, 943 SizeOfPredicates, 3 NumberOfNonLiveVariables, 263 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 39/54 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: (((((((2 == waterLevel) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1)) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((waterLevel <= 1) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 06:16:15,135 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f232b4d-c0eb-480e-8451-25a22e30b180/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE