./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 05:06:17,047 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 05:06:17,114 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 05:06:17,119 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 05:06:17,119 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 05:06:17,143 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 05:06:17,143 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 05:06:17,144 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 05:06:17,145 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 05:06:17,145 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 05:06:17,146 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 05:06:17,147 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 05:06:17,148 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 05:06:17,148 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 05:06:17,149 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 05:06:17,150 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 05:06:17,150 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 05:06:17,151 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 05:06:17,151 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 05:06:17,152 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 05:06:17,152 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 05:06:17,153 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 05:06:17,153 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 05:06:17,154 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 05:06:17,154 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 05:06:17,155 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 05:06:17,155 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 05:06:17,155 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 05:06:17,156 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 05:06:17,156 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 05:06:17,157 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 05:06:17,157 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 05:06:17,158 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 05:06:17,158 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 05:06:17,158 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 05:06:17,158 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 05:06:17,158 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 05:06:17,159 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 05:06:17,159 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 05:06:17,159 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 05:06:17,159 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 05:06:17,160 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 05:06:17,160 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2023-11-29 05:06:17,414 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 05:06:17,436 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 05:06:17,439 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 05:06:17,440 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 05:06:17,441 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 05:06:17,442 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2023-11-29 05:06:20,304 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 05:06:20,503 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 05:06:20,504 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2023-11-29 05:06:20,518 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/data/402ef1a45/f183516c68f642bfa51da80cfff00ba5/FLAG394f999f3 [2023-11-29 05:06:20,530 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/data/402ef1a45/f183516c68f642bfa51da80cfff00ba5 [2023-11-29 05:06:20,532 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 05:06:20,534 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 05:06:20,535 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 05:06:20,535 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 05:06:20,540 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 05:06:20,540 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,541 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@167a4efe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20, skipping insertion in model container [2023-11-29 05:06:20,541 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,584 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 05:06:20,733 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2023-11-29 05:06:20,823 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 05:06:20,834 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 05:06:20,842 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 05:06:20,843 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] [2023-11-29 05:06:20,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [159] [2023-11-29 05:06:20,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [525] [2023-11-29 05:06:20,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] [2023-11-29 05:06:20,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [777] [2023-11-29 05:06:20,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [843] [2023-11-29 05:06:20,845 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [881] [2023-11-29 05:06:20,853 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2023-11-29 05:06:20,905 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 05:06:20,926 INFO L206 MainTranslator]: Completed translation [2023-11-29 05:06:20,926 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20 WrapperNode [2023-11-29 05:06:20,927 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 05:06:20,927 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 05:06:20,928 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 05:06:20,928 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 05:06:20,933 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,947 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,976 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 211 [2023-11-29 05:06:20,976 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 05:06:20,977 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 05:06:20,977 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 05:06:20,977 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 05:06:20,988 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,988 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:20,991 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,006 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 05:06:21,007 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,007 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,013 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,017 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,019 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,021 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,023 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 05:06:21,024 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 05:06:21,024 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 05:06:21,025 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 05:06:21,025 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (1/1) ... [2023-11-29 05:06:21,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 05:06:21,043 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 05:06:21,055 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 05:06:21,060 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 05:06:21,091 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 05:06:21,091 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 05:06:21,092 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 05:06:21,092 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 05:06:21,092 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 05:06:21,092 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 05:06:21,092 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 05:06:21,092 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 05:06:21,092 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 05:06:21,092 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 05:06:21,093 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 05:06:21,093 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-29 05:06:21,093 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-29 05:06:21,093 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 05:06:21,093 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 05:06:21,093 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 05:06:21,093 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 05:06:21,094 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 05:06:21,094 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 05:06:21,094 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 05:06:21,177 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 05:06:21,180 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 05:06:21,440 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 05:06:21,498 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 05:06:21,498 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 05:06:21,499 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 05:06:21 BoogieIcfgContainer [2023-11-29 05:06:21,499 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 05:06:21,501 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 05:06:21,501 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 05:06:21,504 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 05:06:21,505 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 05:06:20" (1/3) ... [2023-11-29 05:06:21,505 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ecf44fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 05:06:21, skipping insertion in model container [2023-11-29 05:06:21,505 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 05:06:20" (2/3) ... [2023-11-29 05:06:21,506 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ecf44fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 05:06:21, skipping insertion in model container [2023-11-29 05:06:21,508 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 05:06:21" (3/3) ... [2023-11-29 05:06:21,509 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2023-11-29 05:06:21,530 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 05:06:21,530 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 05:06:21,584 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 05:06:21,592 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1cc25531, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 05:06:21,592 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 05:06:21,597 INFO L276 IsEmpty]: Start isEmpty. Operand has 77 states, 53 states have (on average 1.509433962264151) internal successors, (80), 61 states have internal predecessors, (80), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-29 05:06:21,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-29 05:06:21,608 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:21,609 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:21,610 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:21,616 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:21,616 INFO L85 PathProgramCache]: Analyzing trace with hash -38034389, now seen corresponding path program 1 times [2023-11-29 05:06:21,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:21,627 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2766127] [2023-11-29 05:06:21,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:21,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:21,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:21,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:21,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:21,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 05:06:21,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:21,807 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:21,808 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:21,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2766127] [2023-11-29 05:06:21,809 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2766127] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:21,809 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:21,809 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 05:06:21,811 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [520206076] [2023-11-29 05:06:21,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:21,816 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 05:06:21,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:21,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 05:06:21,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 05:06:21,847 INFO L87 Difference]: Start difference. First operand has 77 states, 53 states have (on average 1.509433962264151) internal successors, (80), 61 states have internal predecessors, (80), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 05:06:21,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:21,900 INFO L93 Difference]: Finished difference Result 152 states and 217 transitions. [2023-11-29 05:06:21,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 05:06:21,902 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-29 05:06:21,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:21,909 INFO L225 Difference]: With dead ends: 152 [2023-11-29 05:06:21,909 INFO L226 Difference]: Without dead ends: 72 [2023-11-29 05:06:21,912 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 05:06:21,915 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:21,916 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 89 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 05:06:21,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2023-11-29 05:06:21,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2023-11-29 05:06:21,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 50 states have (on average 1.4) internal successors, (70), 57 states have internal predecessors, (70), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 05:06:21,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 97 transitions. [2023-11-29 05:06:21,953 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 97 transitions. Word has length 22 [2023-11-29 05:06:21,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:21,953 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 97 transitions. [2023-11-29 05:06:21,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 05:06:21,954 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 97 transitions. [2023-11-29 05:06:21,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 05:06:21,956 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:21,956 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:21,957 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 05:06:21,957 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:21,958 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:21,958 INFO L85 PathProgramCache]: Analyzing trace with hash 1633170571, now seen corresponding path program 1 times [2023-11-29 05:06:21,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:21,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064321933] [2023-11-29 05:06:21,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:21,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:21,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 05:06:22,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 05:06:22,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,059 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:22,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:22,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064321933] [2023-11-29 05:06:22,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064321933] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:22,060 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:22,061 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 05:06:22,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1443188281] [2023-11-29 05:06:22,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:22,062 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 05:06:22,063 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:22,063 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 05:06:22,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,064 INFO L87 Difference]: Start difference. First operand 72 states and 97 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 05:06:22,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:22,100 INFO L93 Difference]: Finished difference Result 117 states and 157 transitions. [2023-11-29 05:06:22,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 05:06:22,100 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-29 05:06:22,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:22,102 INFO L225 Difference]: With dead ends: 117 [2023-11-29 05:06:22,102 INFO L226 Difference]: Without dead ends: 64 [2023-11-29 05:06:22,103 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,105 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 11 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:22,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 136 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 05:06:22,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-29 05:06:22,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-29 05:06:22,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 45 states have (on average 1.4222222222222223) internal successors, (64), 52 states have internal predecessors, (64), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-29 05:06:22,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 86 transitions. [2023-11-29 05:06:22,118 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 86 transitions. Word has length 23 [2023-11-29 05:06:22,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:22,118 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 86 transitions. [2023-11-29 05:06:22,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 05:06:22,119 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 86 transitions. [2023-11-29 05:06:22,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 05:06:22,120 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:22,120 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:22,120 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 05:06:22,121 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:22,121 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:22,121 INFO L85 PathProgramCache]: Analyzing trace with hash 989570964, now seen corresponding path program 1 times [2023-11-29 05:06:22,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:22,122 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95823115] [2023-11-29 05:06:22,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:22,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:22,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:22,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-29 05:06:22,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,215 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:22,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:22,216 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95823115] [2023-11-29 05:06:22,216 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95823115] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:22,216 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:22,216 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 05:06:22,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [68690140] [2023-11-29 05:06:22,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:22,217 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 05:06:22,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:22,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 05:06:22,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,219 INFO L87 Difference]: Start difference. First operand 64 states and 86 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 05:06:22,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:22,251 INFO L93 Difference]: Finished difference Result 126 states and 171 transitions. [2023-11-29 05:06:22,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 05:06:22,251 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-29 05:06:22,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:22,253 INFO L225 Difference]: With dead ends: 126 [2023-11-29 05:06:22,253 INFO L226 Difference]: Without dead ends: 64 [2023-11-29 05:06:22,254 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,256 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 71 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:22,256 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 73 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 05:06:22,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-29 05:06:22,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-29 05:06:22,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 45 states have (on average 1.4) internal successors, (63), 52 states have internal predecessors, (63), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-29 05:06:22,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 85 transitions. [2023-11-29 05:06:22,267 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 85 transitions. Word has length 26 [2023-11-29 05:06:22,268 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:22,268 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 85 transitions. [2023-11-29 05:06:22,268 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 05:06:22,269 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 85 transitions. [2023-11-29 05:06:22,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 05:06:22,270 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:22,270 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:22,270 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 05:06:22,271 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:22,271 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:22,271 INFO L85 PathProgramCache]: Analyzing trace with hash -1916189960, now seen corresponding path program 1 times [2023-11-29 05:06:22,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:22,272 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549738560] [2023-11-29 05:06:22,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:22,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:22,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:22,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:22,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-29 05:06:22,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,330 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:22,330 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:22,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549738560] [2023-11-29 05:06:22,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549738560] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:22,331 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:22,331 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 05:06:22,331 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654040768] [2023-11-29 05:06:22,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:22,332 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 05:06:22,332 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:22,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 05:06:22,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,333 INFO L87 Difference]: Start difference. First operand 64 states and 85 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 05:06:22,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:22,396 INFO L93 Difference]: Finished difference Result 171 states and 229 transitions. [2023-11-29 05:06:22,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 05:06:22,397 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2023-11-29 05:06:22,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:22,399 INFO L225 Difference]: With dead ends: 171 [2023-11-29 05:06:22,400 INFO L226 Difference]: Without dead ends: 109 [2023-11-29 05:06:22,401 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 05:06:22,403 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 68 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:22,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 133 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 05:06:22,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2023-11-29 05:06:22,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 107. [2023-11-29 05:06:22,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 76 states have (on average 1.355263157894737) internal successors, (103), 84 states have internal predecessors, (103), 16 states have call successors, (16), 14 states have call predecessors, (16), 14 states have return successors, (20), 16 states have call predecessors, (20), 16 states have call successors, (20) [2023-11-29 05:06:22,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 139 transitions. [2023-11-29 05:06:22,425 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 139 transitions. Word has length 33 [2023-11-29 05:06:22,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:22,426 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 139 transitions. [2023-11-29 05:06:22,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 05:06:22,426 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 139 transitions. [2023-11-29 05:06:22,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-29 05:06:22,428 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:22,428 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:22,429 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 05:06:22,429 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:22,429 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:22,429 INFO L85 PathProgramCache]: Analyzing trace with hash 1804428860, now seen corresponding path program 1 times [2023-11-29 05:06:22,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:22,430 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437927966] [2023-11-29 05:06:22,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:22,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:22,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:22,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:22,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:22,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-29 05:06:22,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,612 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:22,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:22,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437927966] [2023-11-29 05:06:22,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437927966] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:22,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:22,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 05:06:22,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1276717485] [2023-11-29 05:06:22,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:22,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 05:06:22,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:22,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 05:06:22,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 05:06:22,616 INFO L87 Difference]: Start difference. First operand 107 states and 139 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:22,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:22,860 INFO L93 Difference]: Finished difference Result 238 states and 315 transitions. [2023-11-29 05:06:22,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 05:06:22,860 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 41 [2023-11-29 05:06:22,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:22,863 INFO L225 Difference]: With dead ends: 238 [2023-11-29 05:06:22,863 INFO L226 Difference]: Without dead ends: 133 [2023-11-29 05:06:22,864 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2023-11-29 05:06:22,865 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 121 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:22,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 185 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 05:06:22,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2023-11-29 05:06:22,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 129. [2023-11-29 05:06:22,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 93 states have (on average 1.3548387096774193) internal successors, (126), 101 states have internal predecessors, (126), 18 states have call successors, (18), 14 states have call predecessors, (18), 17 states have return successors, (25), 19 states have call predecessors, (25), 18 states have call successors, (25) [2023-11-29 05:06:22,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 169 transitions. [2023-11-29 05:06:22,887 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 169 transitions. Word has length 41 [2023-11-29 05:06:22,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:22,887 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 169 transitions. [2023-11-29 05:06:22,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:22,888 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 169 transitions. [2023-11-29 05:06:22,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-29 05:06:22,889 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:22,889 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:22,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 05:06:22,890 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:22,890 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:22,890 INFO L85 PathProgramCache]: Analyzing trace with hash -496393730, now seen corresponding path program 1 times [2023-11-29 05:06:22,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:22,890 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021450184] [2023-11-29 05:06:22,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:22,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:22,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:22,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:22,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:22,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:22,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-29 05:06:23,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,015 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 05:06:23,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:23,015 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021450184] [2023-11-29 05:06:23,016 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021450184] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:23,016 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:23,016 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 05:06:23,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [32564325] [2023-11-29 05:06:23,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:23,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 05:06:23,017 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:23,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 05:06:23,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-29 05:06:23,018 INFO L87 Difference]: Start difference. First operand 129 states and 169 transitions. Second operand has 7 states, 6 states have (on average 5.333333333333333) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 05:06:23,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:23,371 INFO L93 Difference]: Finished difference Result 260 states and 340 transitions. [2023-11-29 05:06:23,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-29 05:06:23,371 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 5.333333333333333) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 41 [2023-11-29 05:06:23,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:23,374 INFO L225 Difference]: With dead ends: 260 [2023-11-29 05:06:23,374 INFO L226 Difference]: Without dead ends: 133 [2023-11-29 05:06:23,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2023-11-29 05:06:23,376 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 115 mSDsluCounter, 217 mSDsCounter, 0 mSdLazyCounter, 231 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:23,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 272 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 231 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 05:06:23,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2023-11-29 05:06:23,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 127. [2023-11-29 05:06:23,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 99 states have internal predecessors, (120), 18 states have call successors, (18), 14 states have call predecessors, (18), 17 states have return successors, (25), 19 states have call predecessors, (25), 18 states have call successors, (25) [2023-11-29 05:06:23,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 163 transitions. [2023-11-29 05:06:23,397 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 163 transitions. Word has length 41 [2023-11-29 05:06:23,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:23,397 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 163 transitions. [2023-11-29 05:06:23,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 5.333333333333333) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 05:06:23,398 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 163 transitions. [2023-11-29 05:06:23,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 05:06:23,399 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:23,399 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:23,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 05:06:23,400 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:23,400 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:23,400 INFO L85 PathProgramCache]: Analyzing trace with hash 1806493512, now seen corresponding path program 1 times [2023-11-29 05:06:23,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:23,401 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1867739278] [2023-11-29 05:06:23,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:23,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:23,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:23,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:23,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:23,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 05:06:23,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,550 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:23,550 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:23,551 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1867739278] [2023-11-29 05:06:23,551 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1867739278] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:23,551 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:23,551 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 05:06:23,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [506071889] [2023-11-29 05:06:23,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:23,552 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 05:06:23,552 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:23,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 05:06:23,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 05:06:23,553 INFO L87 Difference]: Start difference. First operand 127 states and 163 transitions. Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:23,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:23,766 INFO L93 Difference]: Finished difference Result 268 states and 354 transitions. [2023-11-29 05:06:23,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 05:06:23,767 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2023-11-29 05:06:23,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:23,769 INFO L225 Difference]: With dead ends: 268 [2023-11-29 05:06:23,769 INFO L226 Difference]: Without dead ends: 143 [2023-11-29 05:06:23,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2023-11-29 05:06:23,771 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 145 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:23,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 185 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 05:06:23,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2023-11-29 05:06:23,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 129. [2023-11-29 05:06:23,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 93 states have (on average 1.3118279569892473) internal successors, (122), 101 states have internal predecessors, (122), 18 states have call successors, (18), 14 states have call predecessors, (18), 17 states have return successors, (25), 19 states have call predecessors, (25), 18 states have call successors, (25) [2023-11-29 05:06:23,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 165 transitions. [2023-11-29 05:06:23,789 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 165 transitions. Word has length 44 [2023-11-29 05:06:23,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:23,790 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 165 transitions. [2023-11-29 05:06:23,790 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:23,790 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 165 transitions. [2023-11-29 05:06:23,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 05:06:23,792 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:23,792 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:23,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 05:06:23,793 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:23,793 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:23,793 INFO L85 PathProgramCache]: Analyzing trace with hash 1383791686, now seen corresponding path program 1 times [2023-11-29 05:06:23,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:23,794 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [962236255] [2023-11-29 05:06:23,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:23,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:23,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:23,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:23,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:23,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 05:06:23,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:23,884 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:23,884 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:23,884 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [962236255] [2023-11-29 05:06:23,884 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [962236255] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:23,884 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:23,885 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 05:06:23,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701637005] [2023-11-29 05:06:23,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:23,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 05:06:23,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:23,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 05:06:23,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 05:06:23,886 INFO L87 Difference]: Start difference. First operand 129 states and 165 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 05:06:24,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:24,027 INFO L93 Difference]: Finished difference Result 260 states and 340 transitions. [2023-11-29 05:06:24,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 05:06:24,028 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 44 [2023-11-29 05:06:24,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:24,029 INFO L225 Difference]: With dead ends: 260 [2023-11-29 05:06:24,030 INFO L226 Difference]: Without dead ends: 133 [2023-11-29 05:06:24,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 05:06:24,031 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 51 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:24,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 189 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 05:06:24,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2023-11-29 05:06:24,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 129. [2023-11-29 05:06:24,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 18 states have call successors, (18), 14 states have call predecessors, (18), 17 states have return successors, (25), 19 states have call predecessors, (25), 18 states have call successors, (25) [2023-11-29 05:06:24,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 164 transitions. [2023-11-29 05:06:24,046 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 164 transitions. Word has length 44 [2023-11-29 05:06:24,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:24,046 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 164 transitions. [2023-11-29 05:06:24,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 05:06:24,046 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 164 transitions. [2023-11-29 05:06:24,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 05:06:24,047 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:24,047 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:24,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 05:06:24,047 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:24,048 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:24,048 INFO L85 PathProgramCache]: Analyzing trace with hash 1055178, now seen corresponding path program 1 times [2023-11-29 05:06:24,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:24,048 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883594419] [2023-11-29 05:06:24,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:24,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:24,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 05:06:24,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 05:06:24,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:24,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 05:06:24,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,135 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:24,136 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:24,136 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883594419] [2023-11-29 05:06:24,136 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883594419] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:24,136 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:24,136 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 05:06:24,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740413954] [2023-11-29 05:06:24,137 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:24,137 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 05:06:24,137 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:24,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 05:06:24,138 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 05:06:24,138 INFO L87 Difference]: Start difference. First operand 129 states and 164 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:24,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:24,415 INFO L93 Difference]: Finished difference Result 410 states and 560 transitions. [2023-11-29 05:06:24,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 05:06:24,415 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2023-11-29 05:06:24,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:24,418 INFO L225 Difference]: With dead ends: 410 [2023-11-29 05:06:24,418 INFO L226 Difference]: Without dead ends: 283 [2023-11-29 05:06:24,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 05:06:24,419 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 190 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:24,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [198 Valid, 242 Invalid, 273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 05:06:24,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2023-11-29 05:06:24,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 279. [2023-11-29 05:06:24,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 200 states have (on average 1.295) internal successors, (259), 213 states have internal predecessors, (259), 43 states have call successors, (43), 36 states have call predecessors, (43), 35 states have return successors, (67), 41 states have call predecessors, (67), 43 states have call successors, (67) [2023-11-29 05:06:24,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 369 transitions. [2023-11-29 05:06:24,467 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 369 transitions. Word has length 44 [2023-11-29 05:06:24,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:24,467 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 369 transitions. [2023-11-29 05:06:24,467 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 05:06:24,468 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 369 transitions. [2023-11-29 05:06:24,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-29 05:06:24,469 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:24,469 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:24,469 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 05:06:24,469 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:24,470 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:24,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1884193968, now seen corresponding path program 1 times [2023-11-29 05:06:24,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:24,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [611283433] [2023-11-29 05:06:24,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:24,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:24,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 05:06:24,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 05:06:24,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 05:06:24,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:24,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-29 05:06:24,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:24,641 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 05:06:24,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:24,642 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [611283433] [2023-11-29 05:06:24,642 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [611283433] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 05:06:24,642 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 05:06:24,642 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-29 05:06:24,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822020582] [2023-11-29 05:06:24,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 05:06:24,643 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 05:06:24,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:24,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 05:06:24,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-29 05:06:24,645 INFO L87 Difference]: Start difference. First operand 279 states and 369 transitions. Second operand has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 05:06:25,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:25,121 INFO L93 Difference]: Finished difference Result 603 states and 808 transitions. [2023-11-29 05:06:25,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-11-29 05:06:25,121 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 48 [2023-11-29 05:06:25,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:25,125 INFO L225 Difference]: With dead ends: 603 [2023-11-29 05:06:25,125 INFO L226 Difference]: Without dead ends: 326 [2023-11-29 05:06:25,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=138, Invalid=324, Unknown=0, NotChecked=0, Total=462 [2023-11-29 05:06:25,127 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 238 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:25,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 268 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 05:06:25,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2023-11-29 05:06:25,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 316. [2023-11-29 05:06:25,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 227 states have (on average 1.2731277533039647) internal successors, (289), 244 states have internal predecessors, (289), 48 states have call successors, (48), 36 states have call predecessors, (48), 40 states have return successors, (83), 47 states have call predecessors, (83), 48 states have call successors, (83) [2023-11-29 05:06:25,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 420 transitions. [2023-11-29 05:06:25,155 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 420 transitions. Word has length 48 [2023-11-29 05:06:25,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:25,155 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 420 transitions. [2023-11-29 05:06:25,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 05:06:25,156 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 420 transitions. [2023-11-29 05:06:25,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-11-29 05:06:25,157 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 05:06:25,157 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:25,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-29 05:06:25,158 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 05:06:25,158 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 05:06:25,158 INFO L85 PathProgramCache]: Analyzing trace with hash -754437770, now seen corresponding path program 1 times [2023-11-29 05:06:25,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 05:06:25,158 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657934137] [2023-11-29 05:06:25,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:25,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 05:06:25,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 05:06:25,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 05:06:25,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 05:06:25,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 05:06:25,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 05:06:25,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-29 05:06:25,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 05:06:25,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 05:06:25,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 05:06:25,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-29 05:06:25,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,367 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 6 proven. 15 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 05:06:25,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 05:06:25,367 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657934137] [2023-11-29 05:06:25,368 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657934137] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 05:06:25,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [139595044] [2023-11-29 05:06:25,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 05:06:25,368 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 05:06:25,368 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 05:06:25,370 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 05:06:25,375 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 05:06:25,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 05:06:25,466 INFO L262 TraceCheckSpWp]: Trace formula consists of 318 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-29 05:06:25,474 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 05:06:25,619 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 05:06:25,619 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 05:06:25,818 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 05:06:25,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [139595044] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 05:06:25,818 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 05:06:25,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-29 05:06:25,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2100007520] [2023-11-29 05:06:25,819 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 05:06:25,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-29 05:06:25,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 05:06:25,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-29 05:06:25,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-29 05:06:25,821 INFO L87 Difference]: Start difference. First operand 316 states and 420 transitions. Second operand has 15 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2023-11-29 05:06:26,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 05:06:26,926 INFO L93 Difference]: Finished difference Result 708 states and 964 transitions. [2023-11-29 05:06:26,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2023-11-29 05:06:26,926 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) Word has length 84 [2023-11-29 05:06:26,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 05:06:26,929 INFO L225 Difference]: With dead ends: 708 [2023-11-29 05:06:26,930 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 05:06:26,933 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 190 SyntacticMatches, 4 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 338 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=342, Invalid=1140, Unknown=0, NotChecked=0, Total=1482 [2023-11-29 05:06:26,934 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 313 mSDsluCounter, 713 mSDsCounter, 0 mSdLazyCounter, 1086 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 316 SdHoareTripleChecker+Valid, 823 SdHoareTripleChecker+Invalid, 1211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 1086 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-29 05:06:26,934 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [316 Valid, 823 Invalid, 1211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 1086 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-29 05:06:26,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 05:06:26,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 05:06:26,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 05:06:26,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 05:06:26,935 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2023-11-29 05:06:26,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 05:06:26,935 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 05:06:26,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2023-11-29 05:06:26,936 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 05:06:26,936 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 05:06:26,939 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 05:06:26,947 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 05:06:27,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-29 05:06:27,141 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 05:06:28,810 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2023-11-29 05:06:28,810 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2023-11-29 05:06:28,810 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: true [2023-11-29 05:06:28,810 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-29 05:06:28,810 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-29 05:06:28,810 INFO L899 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2023-11-29 05:06:28,810 INFO L902 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2023-11-29 05:06:28,811 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2023-11-29 05:06:28,811 INFO L902 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2023-11-29 05:06:28,811 INFO L902 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2023-11-29 05:06:28,811 INFO L899 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2023-11-29 05:06:28,811 INFO L899 garLoopResultBuilder]: For program point L908(lines 883 912) no Hoare annotation was computed. [2023-11-29 05:06:28,811 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 883 912) the Hoare annotation is: true [2023-11-29 05:06:28,811 INFO L899 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2023-11-29 05:06:28,811 INFO L899 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2023-11-29 05:06:28,812 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse2 (< 2 |old(~waterLevel~0)|)) (or .cse3 .cse0 (and .cse4 (= 2 ~waterLevel~0)) .cse1) (or (< 1 |old(~waterLevel~0)|) .cse3 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2023-11-29 05:06:28,812 INFO L899 garLoopResultBuilder]: For program point L663-1(lines 644 668) no Hoare annotation was computed. [2023-11-29 05:06:28,812 INFO L899 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2023-11-29 05:06:28,812 INFO L895 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (= 1 ~systemActive~0))) (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not .cse10)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (and .cse6 .cse10 .cse8 .cse9)) (.cse7 (< 2 |old(~waterLevel~0)|)) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse3 .cse4 .cse5) (or (and .cse6 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse7) (or .cse0 .cse1 .cse3 .cse4 .cse7 .cse5)))) [2023-11-29 05:06:28,812 INFO L899 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 596) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 660) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L895 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L541-1(line 541) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2023-11-29 05:06:28,813 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 583 609) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point L554-1(lines 546 574) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L895 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse4))) [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2023-11-29 05:06:28,814 INFO L895 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse4))) [2023-11-29 05:06:28,814 INFO L899 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L895 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3))) [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L965(lines 965 972) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L965-2(lines 965 972) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 829) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L895 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point L838(lines 779 842) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3))) [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 05:06:28,815 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L895 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 830) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (= 2 ~waterLevel~0) .cse1 (not (= |old(~waterLevel~0)| 2))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2))) [2023-11-29 05:06:28,816 INFO L895 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L622(lines 622 639) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L899 garLoopResultBuilder]: For program point L684(lines 684 690) no Hoare annotation was computed. [2023-11-29 05:06:28,816 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0) (not (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) .cse1) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L684-2(lines 677 693) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 618 642) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L682-1(line 682) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 136 149) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L767(lines 767 771) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L767-2(lines 767 771) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (< 2 ~waterLevel~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (< 1 ~waterLevel~0)))) [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2023-11-29 05:06:28,817 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 713 721) the Hoare annotation is: true [2023-11-29 05:06:28,818 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2023-11-29 05:06:28,818 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 702 712) the Hoare annotation is: true [2023-11-29 05:06:28,820 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 05:06:28,821 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 05:06:28,831 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 05:06:28 BoogieIcfgContainer [2023-11-29 05:06:28,831 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 05:06:28,831 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 05:06:28,831 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 05:06:28,831 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 05:06:28,832 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 05:06:21" (3/4) ... [2023-11-29 05:06:28,833 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 05:06:28,837 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 05:06:28,837 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 05:06:28,837 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 05:06:28,837 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 05:06:28,837 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 05:06:28,838 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-29 05:06:28,838 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-29 05:06:28,838 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 05:06:28,844 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 05:06:28,845 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 05:06:28,845 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 05:06:28,846 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 05:06:28,846 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 05:06:28,958 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 05:06:28,959 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 05:06:28,959 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 05:06:28,960 INFO L158 Benchmark]: Toolchain (without parser) took 8426.40ms. Allocated memory was 172.0MB in the beginning and 220.2MB in the end (delta: 48.2MB). Free memory was 133.2MB in the beginning and 124.3MB in the end (delta: 8.9MB). Peak memory consumption was 60.3MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,960 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 130.0MB. Free memory is still 73.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 05:06:28,961 INFO L158 Benchmark]: CACSL2BoogieTranslator took 391.74ms. Allocated memory is still 172.0MB. Free memory was 132.7MB in the beginning and 113.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,961 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.73ms. Allocated memory is still 172.0MB. Free memory was 113.4MB in the beginning and 111.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,961 INFO L158 Benchmark]: Boogie Preprocessor took 46.85ms. Allocated memory is still 172.0MB. Free memory was 111.3MB in the beginning and 108.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,962 INFO L158 Benchmark]: RCFGBuilder took 474.49ms. Allocated memory is still 172.0MB. Free memory was 108.8MB in the beginning and 133.2MB in the end (delta: -24.4MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,962 INFO L158 Benchmark]: TraceAbstraction took 7329.81ms. Allocated memory was 172.0MB in the beginning and 220.2MB in the end (delta: 48.2MB). Free memory was 132.2MB in the beginning and 131.6MB in the end (delta: 548.8kB). Peak memory consumption was 120.0MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,963 INFO L158 Benchmark]: Witness Printer took 128.13ms. Allocated memory is still 220.2MB. Free memory was 131.6MB in the beginning and 124.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 05:06:28,965 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 130.0MB. Free memory is still 73.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 391.74ms. Allocated memory is still 172.0MB. Free memory was 132.7MB in the beginning and 113.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.73ms. Allocated memory is still 172.0MB. Free memory was 113.4MB in the beginning and 111.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.85ms. Allocated memory is still 172.0MB. Free memory was 111.3MB in the beginning and 108.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 474.49ms. Allocated memory is still 172.0MB. Free memory was 108.8MB in the beginning and 133.2MB in the end (delta: -24.4MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. * TraceAbstraction took 7329.81ms. Allocated memory was 172.0MB in the beginning and 220.2MB in the end (delta: 48.2MB). Free memory was 132.2MB in the beginning and 131.6MB in the end (delta: 548.8kB). Peak memory consumption was 120.0MB. Max. memory is 16.1GB. * Witness Printer took 128.13ms. Allocated memory is still 220.2MB. Free memory was 131.6MB in the beginning and 124.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] - GenericResultAtLocation [Line: 159]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [159] - GenericResultAtLocation [Line: 525]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [525] - GenericResultAtLocation [Line: 575]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] - GenericResultAtLocation [Line: 777]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [777] - GenericResultAtLocation [Line: 843]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [843] - GenericResultAtLocation [Line: 881]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [881] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 77 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.3s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1360 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1323 mSDsluCounter, 2595 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1770 mSDsCounter, 414 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2320 IncrementalHoareTripleChecker+Invalid, 2734 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 414 mSolverCounterUnsat, 825 mSDtfsCounter, 2320 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 385 GetRequests, 282 SyntacticMatches, 4 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 460 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=316occurred in iteration=10, InterpolantAutomatonStates: 95, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 44 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 624 PreInvPairs, 713 NumberOfFragments, 871 HoareAnnotationTreeSize, 624 FomulaSimplifications, 1067 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 24 FomulaSimplificationsInter, 3170 FormulaSimplificationTreeSizeReductionInter, 1.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 534 NumberOfCodeBlocks, 534 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 605 ConstructedInterpolants, 0 QuantifiedInterpolants, 1176 SizeOfPredicates, 3 NumberOfNonLiveVariables, 318 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 79/107 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 05:06:28,984 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_643cadd9-bf98-46fc-8d52-a74e7de2d920/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE