./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 02:04:38,831 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 02:04:38,893 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 02:04:38,897 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 02:04:38,898 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 02:04:38,919 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 02:04:38,920 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 02:04:38,920 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 02:04:38,921 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 02:04:38,922 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 02:04:38,922 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 02:04:38,923 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 02:04:38,924 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 02:04:38,924 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 02:04:38,925 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 02:04:38,925 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 02:04:38,926 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 02:04:38,926 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 02:04:38,927 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 02:04:38,927 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 02:04:38,928 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 02:04:38,929 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 02:04:38,929 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 02:04:38,930 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 02:04:38,930 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 02:04:38,930 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 02:04:38,931 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 02:04:38,931 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 02:04:38,931 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 02:04:38,932 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 02:04:38,932 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 02:04:38,932 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:04:38,932 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 02:04:38,933 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 02:04:38,933 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 02:04:38,934 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 02:04:38,934 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 02:04:38,935 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 02:04:38,935 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 02:04:38,935 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 02:04:38,936 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 02:04:38,936 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 02:04:38,936 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b [2023-11-29 02:04:39,138 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 02:04:39,159 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 02:04:39,161 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 02:04:39,162 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 02:04:39,163 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 02:04:39,164 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2023-11-29 02:04:41,901 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 02:04:42,101 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 02:04:42,101 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2023-11-29 02:04:42,117 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/data/e99581005/220fa90585644c77818edcb22fa2ae6c/FLAG43e8598f0 [2023-11-29 02:04:42,132 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/data/e99581005/220fa90585644c77818edcb22fa2ae6c [2023-11-29 02:04:42,134 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 02:04:42,136 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 02:04:42,137 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 02:04:42,137 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 02:04:42,142 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 02:04:42,143 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,144 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@738f8cc0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42, skipping insertion in model container [2023-11-29 02:04:42,144 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,191 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 02:04:42,340 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2023-11-29 02:04:42,446 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:04:42,457 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 02:04:42,468 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-29 02:04:42,469 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2023-11-29 02:04:42,469 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [96] [2023-11-29 02:04:42,470 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [165] [2023-11-29 02:04:42,470 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [398] [2023-11-29 02:04:42,470 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [502] [2023-11-29 02:04:42,470 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [536] [2023-11-29 02:04:42,471 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [902] [2023-11-29 02:04:42,474 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2023-11-29 02:04:42,526 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:04:42,546 INFO L206 MainTranslator]: Completed translation [2023-11-29 02:04:42,547 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42 WrapperNode [2023-11-29 02:04:42,547 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 02:04:42,548 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 02:04:42,548 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 02:04:42,549 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 02:04:42,556 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,569 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,593 INFO L138 Inliner]: procedures = 56, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 228 [2023-11-29 02:04:42,593 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 02:04:42,594 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 02:04:42,594 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 02:04:42,594 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 02:04:42,606 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,606 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,609 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,624 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 02:04:42,624 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,625 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,631 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,635 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,637 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,639 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,642 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 02:04:42,643 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 02:04:42,643 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 02:04:42,643 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 02:04:42,644 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (1/1) ... [2023-11-29 02:04:42,651 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:04:42,661 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 02:04:42,672 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 02:04:42,677 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 02:04:42,706 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 02:04:42,707 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 02:04:42,707 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 02:04:42,707 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 02:04:42,707 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 02:04:42,707 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 02:04:42,707 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 02:04:42,707 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 02:04:42,708 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 02:04:42,708 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 02:04:42,708 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 02:04:42,708 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 02:04:42,708 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 02:04:42,709 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 02:04:42,709 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 02:04:42,709 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 02:04:42,709 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 02:04:42,709 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 02:04:42,709 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 02:04:42,709 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 02:04:42,710 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 02:04:42,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 02:04:42,785 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 02:04:42,788 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 02:04:43,090 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 02:04:43,152 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 02:04:43,152 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 02:04:43,153 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:04:43 BoogieIcfgContainer [2023-11-29 02:04:43,153 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 02:04:43,156 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 02:04:43,157 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 02:04:43,160 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 02:04:43,160 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 02:04:42" (1/3) ... [2023-11-29 02:04:43,161 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13118193 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:04:43, skipping insertion in model container [2023-11-29 02:04:43,161 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:04:42" (2/3) ... [2023-11-29 02:04:43,162 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13118193 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:04:43, skipping insertion in model container [2023-11-29 02:04:43,162 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:04:43" (3/3) ... [2023-11-29 02:04:43,163 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product53.cil.c [2023-11-29 02:04:43,178 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 02:04:43,179 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 02:04:43,223 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 02:04:43,228 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@377a9f9c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 02:04:43,228 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 02:04:43,232 INFO L276 IsEmpty]: Start isEmpty. Operand has 81 states, 54 states have (on average 1.537037037037037) internal successors, (83), 64 states have internal predecessors, (83), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-29 02:04:43,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 02:04:43,240 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:43,241 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:43,241 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:43,246 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:43,246 INFO L85 PathProgramCache]: Analyzing trace with hash 1207189717, now seen corresponding path program 1 times [2023-11-29 02:04:43,253 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:43,254 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142673868] [2023-11-29 02:04:43,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:43,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:43,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 02:04:43,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:43,411 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:43,411 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142673868] [2023-11-29 02:04:43,412 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142673868] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:43,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:43,412 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 02:04:43,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [746895899] [2023-11-29 02:04:43,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:43,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 02:04:43,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:43,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 02:04:43,445 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:04:43,447 INFO L87 Difference]: Start difference. First operand has 81 states, 54 states have (on average 1.537037037037037) internal successors, (83), 64 states have internal predecessors, (83), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:43,506 INFO L93 Difference]: Finished difference Result 160 states and 231 transitions. [2023-11-29 02:04:43,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 02:04:43,508 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 02:04:43,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:43,516 INFO L225 Difference]: With dead ends: 160 [2023-11-29 02:04:43,516 INFO L226 Difference]: Without dead ends: 76 [2023-11-29 02:04:43,519 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:04:43,523 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:43,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 94 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:04:43,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-29 02:04:43,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-29 02:04:43,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.4313725490196079) internal successors, (73), 60 states have internal predecessors, (73), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 02:04:43,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 104 transitions. [2023-11-29 02:04:43,561 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 104 transitions. Word has length 17 [2023-11-29 02:04:43,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:43,562 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 104 transitions. [2023-11-29 02:04:43,562 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,562 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 104 transitions. [2023-11-29 02:04:43,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-29 02:04:43,565 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:43,565 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:43,565 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 02:04:43,566 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:43,566 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:43,566 INFO L85 PathProgramCache]: Analyzing trace with hash -848471436, now seen corresponding path program 1 times [2023-11-29 02:04:43,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:43,567 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105949731] [2023-11-29 02:04:43,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:43,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:43,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 02:04:43,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:43,664 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:43,664 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105949731] [2023-11-29 02:04:43,664 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [105949731] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:43,664 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:43,664 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 02:04:43,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1596820660] [2023-11-29 02:04:43,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:43,666 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 02:04:43,666 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:43,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 02:04:43,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:04:43,668 INFO L87 Difference]: Start difference. First operand 76 states and 104 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:43,708 INFO L93 Difference]: Finished difference Result 125 states and 171 transitions. [2023-11-29 02:04:43,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 02:04:43,709 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-29 02:04:43,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:43,710 INFO L225 Difference]: With dead ends: 125 [2023-11-29 02:04:43,710 INFO L226 Difference]: Without dead ends: 68 [2023-11-29 02:04:43,711 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:04:43,713 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 11 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:43,714 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 146 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:04:43,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-29 02:04:43,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-11-29 02:04:43,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 55 states have internal predecessors, (67), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 02:04:43,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 93 transitions. [2023-11-29 02:04:43,725 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 93 transitions. Word has length 18 [2023-11-29 02:04:43,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:43,725 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 93 transitions. [2023-11-29 02:04:43,725 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,725 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 93 transitions. [2023-11-29 02:04:43,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 02:04:43,727 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:43,727 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:43,727 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 02:04:43,727 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:43,728 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:43,728 INFO L85 PathProgramCache]: Analyzing trace with hash 126584986, now seen corresponding path program 1 times [2023-11-29 02:04:43,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:43,729 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133872104] [2023-11-29 02:04:43,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:43,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:43,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:04:43,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:43,811 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:43,811 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133872104] [2023-11-29 02:04:43,811 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133872104] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:43,812 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:43,812 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 02:04:43,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149226346] [2023-11-29 02:04:43,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:43,812 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 02:04:43,813 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:43,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 02:04:43,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:04:43,814 INFO L87 Difference]: Start difference. First operand 68 states and 93 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:43,849 INFO L93 Difference]: Finished difference Result 134 states and 185 transitions. [2023-11-29 02:04:43,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 02:04:43,850 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-29 02:04:43,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:43,851 INFO L225 Difference]: With dead ends: 134 [2023-11-29 02:04:43,852 INFO L226 Difference]: Without dead ends: 68 [2023-11-29 02:04:43,853 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:04:43,854 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:43,855 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 78 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:04:43,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-29 02:04:43,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-11-29 02:04:43,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 46 states have (on average 1.434782608695652) internal successors, (66), 55 states have internal predecessors, (66), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 02:04:43,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 92 transitions. [2023-11-29 02:04:43,867 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 92 transitions. Word has length 21 [2023-11-29 02:04:43,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:43,867 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 92 transitions. [2023-11-29 02:04:43,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:04:43,867 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 92 transitions. [2023-11-29 02:04:43,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-29 02:04:43,869 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:43,869 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:43,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 02:04:43,870 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:43,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:43,870 INFO L85 PathProgramCache]: Analyzing trace with hash 1271791400, now seen corresponding path program 1 times [2023-11-29 02:04:43,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:43,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489044223] [2023-11-29 02:04:43,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:43,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:43,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:04:43,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 02:04:43,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-29 02:04:43,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:43,964 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 02:04:43,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:43,965 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489044223] [2023-11-29 02:04:43,965 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489044223] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:43,965 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:43,965 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 02:04:43,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391331325] [2023-11-29 02:04:43,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:43,966 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 02:04:43,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:43,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 02:04:43,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 02:04:43,967 INFO L87 Difference]: Start difference. First operand 68 states and 92 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 02:04:44,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:44,165 INFO L93 Difference]: Finished difference Result 205 states and 279 transitions. [2023-11-29 02:04:44,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 02:04:44,166 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 31 [2023-11-29 02:04:44,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:44,168 INFO L225 Difference]: With dead ends: 205 [2023-11-29 02:04:44,168 INFO L226 Difference]: Without dead ends: 139 [2023-11-29 02:04:44,169 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 02:04:44,171 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 134 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:44,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 151 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:04:44,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2023-11-29 02:04:44,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 133. [2023-11-29 02:04:44,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 93 states have (on average 1.3763440860215055) internal successors, (128), 101 states have internal predecessors, (128), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-29 02:04:44,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 177 transitions. [2023-11-29 02:04:44,195 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 177 transitions. Word has length 31 [2023-11-29 02:04:44,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:44,195 INFO L495 AbstractCegarLoop]: Abstraction has 133 states and 177 transitions. [2023-11-29 02:04:44,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 02:04:44,196 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 177 transitions. [2023-11-29 02:04:44,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-29 02:04:44,197 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:44,197 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:44,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 02:04:44,198 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:44,198 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:44,198 INFO L85 PathProgramCache]: Analyzing trace with hash 2139911118, now seen corresponding path program 1 times [2023-11-29 02:04:44,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:44,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2067047] [2023-11-29 02:04:44,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:44,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:44,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:04:44,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:44,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 02:04:44,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:44,331 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:44,332 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2067047] [2023-11-29 02:04:44,332 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2067047] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:44,332 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:44,332 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 02:04:44,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1135490098] [2023-11-29 02:04:44,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:44,333 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 02:04:44,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:44,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 02:04:44,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 02:04:44,334 INFO L87 Difference]: Start difference. First operand 133 states and 177 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:04:44,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:44,639 INFO L93 Difference]: Finished difference Result 360 states and 505 transitions. [2023-11-29 02:04:44,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-29 02:04:44,640 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2023-11-29 02:04:44,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:44,643 INFO L225 Difference]: With dead ends: 360 [2023-11-29 02:04:44,643 INFO L226 Difference]: Without dead ends: 229 [2023-11-29 02:04:44,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-29 02:04:44,646 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 137 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:44,647 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 297 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:04:44,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2023-11-29 02:04:44,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 214. [2023-11-29 02:04:44,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 152 states have (on average 1.355263157894737) internal successors, (206), 162 states have internal predecessors, (206), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (49), 32 states have call predecessors, (49), 30 states have call successors, (49) [2023-11-29 02:04:44,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 285 transitions. [2023-11-29 02:04:44,682 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 285 transitions. Word has length 38 [2023-11-29 02:04:44,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:44,683 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 285 transitions. [2023-11-29 02:04:44,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:04:44,683 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 285 transitions. [2023-11-29 02:04:44,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-29 02:04:44,685 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:44,685 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:44,685 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 02:04:44,685 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:44,686 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:44,686 INFO L85 PathProgramCache]: Analyzing trace with hash -466112436, now seen corresponding path program 1 times [2023-11-29 02:04:44,686 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:44,686 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329582426] [2023-11-29 02:04:44,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:44,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:44,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:04:44,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:44,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 02:04:44,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:44,794 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:44,794 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:44,795 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329582426] [2023-11-29 02:04:44,795 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329582426] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:44,795 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:44,795 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 02:04:44,795 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [325760774] [2023-11-29 02:04:44,796 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:44,796 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 02:04:44,796 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:44,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 02:04:44,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-29 02:04:44,798 INFO L87 Difference]: Start difference. First operand 214 states and 285 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 02:04:45,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:45,112 INFO L93 Difference]: Finished difference Result 434 states and 575 transitions. [2023-11-29 02:04:45,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-29 02:04:45,113 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 38 [2023-11-29 02:04:45,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:45,115 INFO L225 Difference]: With dead ends: 434 [2023-11-29 02:04:45,115 INFO L226 Difference]: Without dead ends: 222 [2023-11-29 02:04:45,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=121, Unknown=0, NotChecked=0, Total=182 [2023-11-29 02:04:45,118 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 231 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 279 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:45,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [236 Valid, 230 Invalid, 279 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:04:45,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2023-11-29 02:04:45,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 214. [2023-11-29 02:04:45,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 152 states have (on average 1.3026315789473684) internal successors, (198), 162 states have internal predecessors, (198), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (39), 32 states have call predecessors, (39), 30 states have call successors, (39) [2023-11-29 02:04:45,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 267 transitions. [2023-11-29 02:04:45,143 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 267 transitions. Word has length 38 [2023-11-29 02:04:45,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:45,143 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 267 transitions. [2023-11-29 02:04:45,144 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 02:04:45,144 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 267 transitions. [2023-11-29 02:04:45,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-29 02:04:45,145 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:45,145 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:45,146 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 02:04:45,146 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:45,146 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:45,146 INFO L85 PathProgramCache]: Analyzing trace with hash -1953805507, now seen corresponding path program 1 times [2023-11-29 02:04:45,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:45,147 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758945525] [2023-11-29 02:04:45,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:45,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:45,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:04:45,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:45,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 02:04:45,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-29 02:04:45,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:45,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:45,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758945525] [2023-11-29 02:04:45,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758945525] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:45,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:45,241 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 02:04:45,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673261530] [2023-11-29 02:04:45,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:45,242 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 02:04:45,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:45,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 02:04:45,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 02:04:45,243 INFO L87 Difference]: Start difference. First operand 214 states and 267 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 02:04:45,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:45,451 INFO L93 Difference]: Finished difference Result 428 states and 534 transitions. [2023-11-29 02:04:45,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 02:04:45,452 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 41 [2023-11-29 02:04:45,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:45,455 INFO L225 Difference]: With dead ends: 428 [2023-11-29 02:04:45,455 INFO L226 Difference]: Without dead ends: 216 [2023-11-29 02:04:45,456 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-29 02:04:45,457 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 114 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:45,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 209 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:04:45,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 216 states. [2023-11-29 02:04:45,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 216 to 212. [2023-11-29 02:04:45,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 150 states have (on average 1.2866666666666666) internal successors, (193), 160 states have internal predecessors, (193), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (39), 32 states have call predecessors, (39), 30 states have call successors, (39) [2023-11-29 02:04:45,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 262 transitions. [2023-11-29 02:04:45,480 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 262 transitions. Word has length 41 [2023-11-29 02:04:45,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:45,480 INFO L495 AbstractCegarLoop]: Abstraction has 212 states and 262 transitions. [2023-11-29 02:04:45,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 02:04:45,481 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 262 transitions. [2023-11-29 02:04:45,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-29 02:04:45,482 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:45,482 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:45,482 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 02:04:45,482 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:45,483 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:45,483 INFO L85 PathProgramCache]: Analyzing trace with hash 889053331, now seen corresponding path program 1 times [2023-11-29 02:04:45,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:45,483 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1641211223] [2023-11-29 02:04:45,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:45,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:45,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 02:04:45,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 02:04:45,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:45,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 02:04:45,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 02:04:45,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:45,576 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:45,576 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1641211223] [2023-11-29 02:04:45,576 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1641211223] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:45,576 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:45,576 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 02:04:45,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [8752778] [2023-11-29 02:04:45,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:45,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 02:04:45,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:45,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 02:04:45,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 02:04:45,578 INFO L87 Difference]: Start difference. First operand 212 states and 262 transitions. Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-29 02:04:45,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:45,868 INFO L93 Difference]: Finished difference Result 464 states and 582 transitions. [2023-11-29 02:04:45,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 02:04:45,870 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2023-11-29 02:04:45,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:45,873 INFO L225 Difference]: With dead ends: 464 [2023-11-29 02:04:45,873 INFO L226 Difference]: Without dead ends: 254 [2023-11-29 02:04:45,874 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2023-11-29 02:04:45,874 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 114 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:45,875 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 190 Invalid, 317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:04:45,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2023-11-29 02:04:45,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 246. [2023-11-29 02:04:45,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 175 states have (on average 1.28) internal successors, (224), 189 states have internal predecessors, (224), 35 states have call successors, (35), 26 states have call predecessors, (35), 35 states have return successors, (49), 37 states have call predecessors, (49), 35 states have call successors, (49) [2023-11-29 02:04:45,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 308 transitions. [2023-11-29 02:04:45,898 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 308 transitions. Word has length 45 [2023-11-29 02:04:45,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:45,898 INFO L495 AbstractCegarLoop]: Abstraction has 246 states and 308 transitions. [2023-11-29 02:04:45,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-29 02:04:45,899 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 308 transitions. [2023-11-29 02:04:45,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-29 02:04:45,899 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:45,900 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:45,900 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 02:04:45,900 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:45,900 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:45,900 INFO L85 PathProgramCache]: Analyzing trace with hash 1487847063, now seen corresponding path program 1 times [2023-11-29 02:04:45,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:45,900 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2020000450] [2023-11-29 02:04:45,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:45,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:45,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:45,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 02:04:45,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 02:04:46,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:46,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 02:04:46,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 02:04:46,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:04:46,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:46,050 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2020000450] [2023-11-29 02:04:46,050 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2020000450] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:04:46,051 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:04:46,051 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-29 02:04:46,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1816658108] [2023-11-29 02:04:46,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:46,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 02:04:46,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:46,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 02:04:46,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-29 02:04:46,052 INFO L87 Difference]: Start difference. First operand 246 states and 308 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 6 states have internal predecessors, (34), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-29 02:04:46,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:46,660 INFO L93 Difference]: Finished difference Result 567 states and 736 transitions. [2023-11-29 02:04:46,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-29 02:04:46,661 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 6 states have internal predecessors, (34), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 45 [2023-11-29 02:04:46,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:46,664 INFO L225 Difference]: With dead ends: 567 [2023-11-29 02:04:46,664 INFO L226 Difference]: Without dead ends: 402 [2023-11-29 02:04:46,665 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2023-11-29 02:04:46,666 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 446 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 542 mSolverCounterSat, 175 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 717 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 542 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:46,666 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [452 Valid, 326 Invalid, 717 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 542 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-29 02:04:46,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 402 states. [2023-11-29 02:04:46,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 402 to 396. [2023-11-29 02:04:46,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 396 states, 282 states have (on average 1.2801418439716312) internal successors, (361), 302 states have internal predecessors, (361), 59 states have call successors, (59), 48 states have call predecessors, (59), 54 states have return successors, (84), 57 states have call predecessors, (84), 59 states have call successors, (84) [2023-11-29 02:04:46,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 396 states to 396 states and 504 transitions. [2023-11-29 02:04:46,728 INFO L78 Accepts]: Start accepts. Automaton has 396 states and 504 transitions. Word has length 45 [2023-11-29 02:04:46,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:46,728 INFO L495 AbstractCegarLoop]: Abstraction has 396 states and 504 transitions. [2023-11-29 02:04:46,728 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 6 states have internal predecessors, (34), 5 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-29 02:04:46,728 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 504 transitions. [2023-11-29 02:04:46,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2023-11-29 02:04:46,730 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:04:46,730 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:46,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 02:04:46,731 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:04:46,731 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:04:46,731 INFO L85 PathProgramCache]: Analyzing trace with hash -1705971420, now seen corresponding path program 1 times [2023-11-29 02:04:46,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:04:46,732 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1565949241] [2023-11-29 02:04:46,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:46,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:04:46,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 02:04:46,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 02:04:46,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:04:46,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-29 02:04:46,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-29 02:04:46,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-29 02:04:46,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-29 02:04:46,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:46,966 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-29 02:04:46,966 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:04:46,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1565949241] [2023-11-29 02:04:46,966 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1565949241] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 02:04:46,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [496926642] [2023-11-29 02:04:46,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:04:46,967 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 02:04:46,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 02:04:46,970 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 02:04:46,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 02:04:47,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:04:47,058 INFO L262 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 02:04:47,064 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 02:04:47,224 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 8 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-29 02:04:47,224 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 02:04:47,428 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-29 02:04:47,428 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [496926642] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-29 02:04:47,428 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-29 02:04:47,429 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 6] total 17 [2023-11-29 02:04:47,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530327586] [2023-11-29 02:04:47,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:04:47,429 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 02:04:47,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:04:47,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 02:04:47,430 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=230, Unknown=0, NotChecked=0, Total=272 [2023-11-29 02:04:47,431 INFO L87 Difference]: Start difference. First operand 396 states and 504 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 6 states have internal predecessors, (44), 4 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 02:04:47,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:04:47,574 INFO L93 Difference]: Finished difference Result 737 states and 980 transitions. [2023-11-29 02:04:47,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 02:04:47,575 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 6 states have internal predecessors, (44), 4 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) Word has length 68 [2023-11-29 02:04:47,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:04:47,576 INFO L225 Difference]: With dead ends: 737 [2023-11-29 02:04:47,576 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 02:04:47,578 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 142 SyntacticMatches, 1 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2023-11-29 02:04:47,579 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 160 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 02:04:47,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [160 Valid, 172 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 02:04:47,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 02:04:47,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 02:04:47,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:04:47,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 02:04:47,580 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 68 [2023-11-29 02:04:47,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:04:47,581 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 02:04:47,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 6 states have internal predecessors, (44), 4 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 02:04:47,581 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 02:04:47,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 02:04:47,583 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 02:04:47,591 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 02:04:47,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 02:04:47,790 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 02:04:49,145 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 296 303) no Hoare annotation was computed. [2023-11-29 02:04:49,146 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 296 303) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) [2023-11-29 02:04:49,146 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 203 209) no Hoare annotation was computed. [2023-11-29 02:04:49,146 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 203 209) the Hoare annotation is: true [2023-11-29 02:04:49,146 INFO L899 garLoopResultBuilder]: For program point L430-1(lines 426 437) no Hoare annotation was computed. [2023-11-29 02:04:49,146 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 426 437) the Hoare annotation is: true [2023-11-29 02:04:49,146 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 426 437) no Hoare annotation was computed. [2023-11-29 02:04:49,146 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 438 446) the Hoare annotation is: true [2023-11-29 02:04:49,146 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 438 446) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L899 garLoopResultBuilder]: For program point L929(lines 904 933) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L899 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L902 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2023-11-29 02:04:49,147 INFO L902 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2023-11-29 02:04:49,147 INFO L902 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2023-11-29 02:04:49,147 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2023-11-29 02:04:49,147 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 904 933) the Hoare annotation is: true [2023-11-29 02:04:49,148 INFO L895 garLoopResultBuilder]: At program point L510(line 510) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) .cse5)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 3 |old(~waterLevel~0)|)) (.cse4 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (< |old(~waterLevel~0)| 2) .cse3) (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse4 .cse5) .cse1 .cse3) (let ((.cse6 (<= ~waterLevel~0 1))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6) .cse1 .cse2 (< |old(~pumpRunning~0)| 1) (and .cse4 .cse6)))))) [2023-11-29 02:04:49,148 INFO L899 garLoopResultBuilder]: For program point L510-1(line 510) no Hoare annotation was computed. [2023-11-29 02:04:49,148 INFO L899 garLoopResultBuilder]: For program point L271(lines 271 279) no Hoare annotation was computed. [2023-11-29 02:04:49,148 INFO L899 garLoopResultBuilder]: For program point L267(lines 267 284) no Hoare annotation was computed. [2023-11-29 02:04:49,148 INFO L895 garLoopResultBuilder]: At program point L309(line 309) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 3 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1)) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,149 INFO L899 garLoopResultBuilder]: For program point L309-1(line 309) no Hoare annotation was computed. [2023-11-29 02:04:49,149 INFO L899 garLoopResultBuilder]: For program point L512(lines 512 532) no Hoare annotation was computed. [2023-11-29 02:04:49,149 INFO L899 garLoopResultBuilder]: For program point L190-1(lines 190 196) no Hoare annotation was computed. [2023-11-29 02:04:49,149 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-29 02:04:49,149 INFO L895 garLoopResultBuilder]: At program point L277(line 277) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 3 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1)) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,149 INFO L895 garLoopResultBuilder]: At program point L273(line 273) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 3 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1)) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,150 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 179 202) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 3 |old(~waterLevel~0)|)) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,150 INFO L895 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 3 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,150 INFO L899 garLoopResultBuilder]: For program point L282-1(lines 263 287) no Hoare annotation was computed. [2023-11-29 02:04:49,150 INFO L899 garLoopResultBuilder]: For program point L406(lines 406 410) no Hoare annotation was computed. [2023-11-29 02:04:49,150 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 182 201) no Hoare annotation was computed. [2023-11-29 02:04:49,150 INFO L899 garLoopResultBuilder]: For program point L406-2(lines 402 413) no Hoare annotation was computed. [2023-11-29 02:04:49,150 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 179 202) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L522(lines 522 528) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L518(lines 518 531) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 503 535) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L985(lines 985 992) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L985-2(lines 985 992) no Hoare annotation was computed. [2023-11-29 02:04:49,151 INFO L899 garLoopResultBuilder]: For program point L147(lines 147 151) no Hoare annotation was computed. [2023-11-29 02:04:49,152 INFO L895 garLoopResultBuilder]: At program point L147-2(lines 141 152) the Hoare annotation is: (let ((.cse2 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and .cse2 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 (<= ~waterLevel~0 1) .cse0 .cse1))) [2023-11-29 02:04:49,152 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 137) no Hoare annotation was computed. [2023-11-29 02:04:49,152 INFO L899 garLoopResultBuilder]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2023-11-29 02:04:49,152 INFO L899 garLoopResultBuilder]: For program point L160(lines 101 164) no Hoare annotation was computed. [2023-11-29 02:04:49,152 INFO L895 garLoopResultBuilder]: At program point L123(line 123) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse3 .cse1 .cse2))) [2023-11-29 02:04:49,152 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 02:04:49,153 INFO L895 garLoopResultBuilder]: At program point L157(lines 110 158) the Hoare annotation is: false [2023-11-29 02:04:49,153 INFO L899 garLoopResultBuilder]: For program point L112(lines 111 156) no Hoare annotation was computed. [2023-11-29 02:04:49,153 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 152) no Hoare annotation was computed. [2023-11-29 02:04:49,153 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 02:04:49,153 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse2 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and .cse2 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 (<= ~waterLevel~0 1) .cse0 .cse1))) [2023-11-29 02:04:49,153 INFO L895 garLoopResultBuilder]: At program point L154(lines 111 156) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse3 .cse1 .cse2))) [2023-11-29 02:04:49,153 INFO L899 garLoopResultBuilder]: For program point L121(lines 121 127) no Hoare annotation was computed. [2023-11-29 02:04:49,154 INFO L899 garLoopResultBuilder]: For program point L121-1(lines 121 127) no Hoare annotation was computed. [2023-11-29 02:04:49,154 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= 3 ~waterLevel~0) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1))))) [2023-11-29 02:04:49,154 INFO L899 garLoopResultBuilder]: For program point L219(lines 219 227) no Hoare annotation was computed. [2023-11-29 02:04:49,154 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 232) no Hoare annotation was computed. [2023-11-29 02:04:49,154 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 211 235) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (<= 3 ~waterLevel~0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,154 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= 3 ~waterLevel~0)))) [2023-11-29 02:04:49,154 INFO L899 garLoopResultBuilder]: For program point L230-1(lines 211 235) no Hoare annotation was computed. [2023-11-29 02:04:49,154 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 479 492) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 211 235) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point L369-2(lines 369 373) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point L483(lines 483 489) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point L418-1(lines 414 425) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 414 425) no Hoare annotation was computed. [2023-11-29 02:04:49,155 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 414 425) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (< 1 |old(~waterLevel~0)|) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or (< ~pumpRunning~0 1) .cse0 (<= 3 |old(~waterLevel~0)|) .cse1))) [2023-11-29 02:04:49,155 INFO L895 garLoopResultBuilder]: At program point L256(line 256) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (<= 3 ~waterLevel~0)) (or .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,156 INFO L899 garLoopResultBuilder]: For program point L256-1(lines 237 261) no Hoare annotation was computed. [2023-11-29 02:04:49,156 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 237 261) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (<= 3 ~waterLevel~0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 02:04:49,156 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 237 261) no Hoare annotation was computed. [2023-11-29 02:04:49,156 INFO L895 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= 3 ~waterLevel~0)))) [2023-11-29 02:04:49,156 INFO L895 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (<= 3 ~waterLevel~0)))) [2023-11-29 02:04:49,156 INFO L899 garLoopResultBuilder]: For program point L245(lines 245 253) no Hoare annotation was computed. [2023-11-29 02:04:49,156 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 258) no Hoare annotation was computed. [2023-11-29 02:04:49,156 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 392) no Hoare annotation was computed. [2023-11-29 02:04:49,157 INFO L899 garLoopResultBuilder]: For program point L388-2(lines 388 392) no Hoare annotation was computed. [2023-11-29 02:04:49,159 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:04:49,161 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 02:04:49,173 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 02:04:49 BoogieIcfgContainer [2023-11-29 02:04:49,173 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 02:04:49,173 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 02:04:49,173 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 02:04:49,173 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 02:04:49,174 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:04:43" (3/4) ... [2023-11-29 02:04:49,176 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 02:04:49,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 02:04:49,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 02:04:49,179 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 02:04:49,180 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 02:04:49,188 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 35 nodes and edges [2023-11-29 02:04:49,189 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 02:04:49,190 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 02:04:49,190 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:04:49,191 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:04:49,305 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 02:04:49,306 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 02:04:49,306 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 02:04:49,307 INFO L158 Benchmark]: Toolchain (without parser) took 7171.19ms. Allocated memory was 142.6MB in the beginning and 213.9MB in the end (delta: 71.3MB). Free memory was 97.6MB in the beginning and 79.9MB in the end (delta: 17.7MB). Peak memory consumption was 89.4MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,307 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 142.6MB. Free memory is still 85.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 02:04:49,307 INFO L158 Benchmark]: CACSL2BoogieTranslator took 410.63ms. Allocated memory is still 142.6MB. Free memory was 97.1MB in the beginning and 77.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,308 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.31ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 75.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,308 INFO L158 Benchmark]: Boogie Preprocessor took 47.68ms. Allocated memory is still 142.6MB. Free memory was 75.3MB in the beginning and 72.9MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,309 INFO L158 Benchmark]: RCFGBuilder took 510.76ms. Allocated memory was 142.6MB in the beginning and 174.1MB in the end (delta: 31.5MB). Free memory was 72.9MB in the beginning and 132.3MB in the end (delta: -59.4MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,309 INFO L158 Benchmark]: TraceAbstraction took 6016.43ms. Allocated memory was 174.1MB in the beginning and 213.9MB in the end (delta: 39.8MB). Free memory was 131.4MB in the beginning and 87.2MB in the end (delta: 44.2MB). Peak memory consumption was 114.4MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,309 INFO L158 Benchmark]: Witness Printer took 132.89ms. Allocated memory is still 213.9MB. Free memory was 87.2MB in the beginning and 79.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 02:04:49,311 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 142.6MB. Free memory is still 85.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 410.63ms. Allocated memory is still 142.6MB. Free memory was 97.1MB in the beginning and 77.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.31ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 75.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.68ms. Allocated memory is still 142.6MB. Free memory was 75.3MB in the beginning and 72.9MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 510.76ms. Allocated memory was 142.6MB in the beginning and 174.1MB in the end (delta: 31.5MB). Free memory was 72.9MB in the beginning and 132.3MB in the end (delta: -59.4MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. * TraceAbstraction took 6016.43ms. Allocated memory was 174.1MB in the beginning and 213.9MB in the end (delta: 39.8MB). Free memory was 131.4MB in the beginning and 87.2MB in the end (delta: 44.2MB). Peak memory consumption was 114.4MB. Max. memory is 16.1GB. * Witness Printer took 132.89ms. Allocated memory is still 213.9MB. Free memory was 87.2MB in the beginning and 79.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [96] - GenericResultAtLocation [Line: 165]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [165] - GenericResultAtLocation [Line: 398]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [398] - GenericResultAtLocation [Line: 502]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [502] - GenericResultAtLocation [Line: 536]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [536] - GenericResultAtLocation [Line: 902]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [902] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 81 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.0s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1462 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1428 mSDsluCounter, 1893 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1155 mSDsCounter, 435 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1611 IncrementalHoareTripleChecker+Invalid, 2046 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 435 mSolverCounterUnsat, 738 mSDtfsCounter, 1611 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 292 GetRequests, 219 SyntacticMatches, 1 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 95 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=396occurred in iteration=9, InterpolantAutomatonStates: 70, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 47 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 681 PreInvPairs, 766 NumberOfFragments, 647 HoareAnnotationTreeSize, 681 FomulaSimplifications, 345 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 27 FomulaSimplificationsInter, 2342 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 430 NumberOfCodeBlocks, 430 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 486 ConstructedInterpolants, 0 QuantifiedInterpolants, 1051 SizeOfPredicates, 3 NumberOfNonLiveVariables, 267 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 54/68 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((1 <= pumpRunning) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 02:04:49,327 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e66096a4-c904-4938-8601-46957de412e5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE