./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae2f7a85a5093ad80fd05f69a7d0bbcf9a510999a9154b6f2d8037f035f00930 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 20:35:01,155 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 20:35:01,157 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 20:35:01,174 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 20:35:01,174 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 20:35:01,175 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 20:35:01,176 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 20:35:01,178 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 20:35:01,179 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 20:35:01,180 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 20:35:01,181 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 20:35:01,182 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 20:35:01,182 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 20:35:01,183 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 20:35:01,184 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 20:35:01,185 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 20:35:01,186 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 20:35:01,187 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 20:35:01,188 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 20:35:01,189 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 20:35:01,191 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 20:35:01,192 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 20:35:01,193 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 20:35:01,193 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 20:35:01,196 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 20:35:01,197 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 20:35:01,197 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 20:35:01,198 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 20:35:01,198 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 20:35:01,199 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 20:35:01,199 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 20:35:01,200 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 20:35:01,200 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 20:35:01,201 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 20:35:01,202 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 20:35:01,202 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 20:35:01,203 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 20:35:01,203 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 20:35:01,203 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 20:35:01,204 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 20:35:01,204 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 20:35:01,205 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 20:35:01,224 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 20:35:01,225 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 20:35:01,225 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 20:35:01,225 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 20:35:01,225 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 20:35:01,225 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 20:35:01,226 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 20:35:01,226 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 20:35:01,226 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 20:35:01,226 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 20:35:01,226 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 20:35:01,226 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 20:35:01,226 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 20:35:01,227 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 20:35:01,227 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 20:35:01,228 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 20:35:01,228 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 20:35:01,229 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae2f7a85a5093ad80fd05f69a7d0bbcf9a510999a9154b6f2d8037f035f00930 [2022-12-13 20:35:01,383 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 20:35:01,401 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 20:35:01,403 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 20:35:01,404 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 20:35:01,404 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 20:35:01,406 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c [2022-12-13 20:35:04,007 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 20:35:04,184 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 20:35:04,184 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c [2022-12-13 20:35:04,192 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/data/05c02df3f/314b9739c7fc4c708afd62d09f26ee0b/FLAGc6dd4f5ee [2022-12-13 20:35:04,203 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/data/05c02df3f/314b9739c7fc4c708afd62d09f26ee0b [2022-12-13 20:35:04,204 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 20:35:04,205 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 20:35:04,206 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 20:35:04,206 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 20:35:04,209 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 20:35:04,210 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,211 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7efc4224 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04, skipping insertion in model container [2022-12-13 20:35:04,211 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,217 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 20:35:04,240 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 20:35:04,406 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c[17123,17136] [2022-12-13 20:35:04,412 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 20:35:04,420 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 20:35:04,462 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c[17123,17136] [2022-12-13 20:35:04,464 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 20:35:04,477 INFO L208 MainTranslator]: Completed translation [2022-12-13 20:35:04,477 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04 WrapperNode [2022-12-13 20:35:04,477 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 20:35:04,478 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 20:35:04,478 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 20:35:04,478 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 20:35:04,483 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,492 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,508 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 188 [2022-12-13 20:35:04,508 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 20:35:04,509 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 20:35:04,509 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 20:35:04,509 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 20:35:04,516 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,516 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,518 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,518 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,521 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,524 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,525 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,525 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,527 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 20:35:04,528 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 20:35:04,528 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 20:35:04,528 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 20:35:04,528 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (1/1) ... [2022-12-13 20:35:04,533 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 20:35:04,543 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 20:35:04,564 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 20:35:04,566 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 20:35:04,600 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 20:35:04,600 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 20:35:04,605 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 20:35:04,605 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 20:35:04,605 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 20:35:04,605 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 20:35:04,606 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 20:35:04,606 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 20:35:04,606 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 20:35:04,606 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 20:35:04,606 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 20:35:04,606 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-12-13 20:35:04,606 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-12-13 20:35:04,606 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-12-13 20:35:04,606 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-12-13 20:35:04,607 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-13 20:35:04,607 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-13 20:35:04,607 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 20:35:04,607 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 20:35:04,607 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 20:35:04,607 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 20:35:04,607 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 20:35:04,675 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 20:35:04,677 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 20:35:04,888 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 20:35:04,895 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 20:35:04,896 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 20:35:04,898 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 08:35:04 BoogieIcfgContainer [2022-12-13 20:35:04,898 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 20:35:04,900 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 20:35:04,901 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 20:35:04,904 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 20:35:04,904 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 08:35:04" (1/3) ... [2022-12-13 20:35:04,905 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@334056a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 08:35:04, skipping insertion in model container [2022-12-13 20:35:04,905 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 08:35:04" (2/3) ... [2022-12-13 20:35:04,905 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@334056a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 08:35:04, skipping insertion in model container [2022-12-13 20:35:04,905 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 08:35:04" (3/3) ... [2022-12-13 20:35:04,907 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product48.cil.c [2022-12-13 20:35:04,923 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 20:35:04,923 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 20:35:04,963 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 20:35:04,967 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1db9dcd, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 20:35:04,967 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 20:35:04,972 INFO L276 IsEmpty]: Start isEmpty. Operand has 101 states, 74 states have (on average 1.364864864864865) internal successors, (101), 83 states have internal predecessors, (101), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-12-13 20:35:04,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-13 20:35:04,982 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:04,982 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:04,983 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:04,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:04,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1258110476, now seen corresponding path program 1 times [2022-12-13 20:35:04,998 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:04,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693656100] [2022-12-13 20:35:04,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:04,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:05,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-12-13 20:35:05,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 20:35:05,164 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:05,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693656100] [2022-12-13 20:35:05,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693656100] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:05,165 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:05,165 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 20:35:05,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431101019] [2022-12-13 20:35:05,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:05,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 20:35:05,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:05,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 20:35:05,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 20:35:05,197 INFO L87 Difference]: Start difference. First operand has 101 states, 74 states have (on average 1.364864864864865) internal successors, (101), 83 states have internal predecessors, (101), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:05,222 INFO L93 Difference]: Finished difference Result 194 states and 261 transitions. [2022-12-13 20:35:05,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 20:35:05,223 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-12-13 20:35:05,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:05,230 INFO L225 Difference]: With dead ends: 194 [2022-12-13 20:35:05,230 INFO L226 Difference]: Without dead ends: 92 [2022-12-13 20:35:05,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 20:35:05,235 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:05,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 20:35:05,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-12-13 20:35:05,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-12-13 20:35:05,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 75 states have internal predecessors, (87), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-12-13 20:35:05,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 118 transitions. [2022-12-13 20:35:05,267 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 118 transitions. Word has length 23 [2022-12-13 20:35:05,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:05,267 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 118 transitions. [2022-12-13 20:35:05,268 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,268 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 118 transitions. [2022-12-13 20:35:05,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-12-13 20:35:05,269 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:05,269 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:05,269 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 20:35:05,270 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:05,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:05,270 INFO L85 PathProgramCache]: Analyzing trace with hash -1705390326, now seen corresponding path program 1 times [2022-12-13 20:35:05,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:05,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238496893] [2022-12-13 20:35:05,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:05,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:05,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 20:35:05,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 20:35:05,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:05,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238496893] [2022-12-13 20:35:05,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238496893] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:05,341 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:05,341 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 20:35:05,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240411019] [2022-12-13 20:35:05,341 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:05,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 20:35:05,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:05,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 20:35:05,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 20:35:05,343 INFO L87 Difference]: Start difference. First operand 92 states and 118 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:05,357 INFO L93 Difference]: Finished difference Result 145 states and 185 transitions. [2022-12-13 20:35:05,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 20:35:05,358 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-12-13 20:35:05,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:05,359 INFO L225 Difference]: With dead ends: 145 [2022-12-13 20:35:05,359 INFO L226 Difference]: Without dead ends: 83 [2022-12-13 20:35:05,360 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 20:35:05,360 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 17 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:05,361 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 188 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 20:35:05,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-12-13 20:35:05,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-12-13 20:35:05,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 61 states have (on average 1.3114754098360655) internal successors, (80), 69 states have internal predecessors, (80), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 20:35:05,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 106 transitions. [2022-12-13 20:35:05,369 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 106 transitions. Word has length 24 [2022-12-13 20:35:05,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:05,370 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 106 transitions. [2022-12-13 20:35:05,370 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,370 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 106 transitions. [2022-12-13 20:35:05,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-13 20:35:05,372 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:05,372 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:05,372 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 20:35:05,372 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:05,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:05,373 INFO L85 PathProgramCache]: Analyzing trace with hash 581187755, now seen corresponding path program 1 times [2022-12-13 20:35:05,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:05,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890954791] [2022-12-13 20:35:05,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:05,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:05,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 20:35:05,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 20:35:05,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:05,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890954791] [2022-12-13 20:35:05,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1890954791] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:05,437 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:05,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 20:35:05,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1978008016] [2022-12-13 20:35:05,437 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:05,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 20:35:05,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:05,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 20:35:05,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 20:35:05,439 INFO L87 Difference]: Start difference. First operand 83 states and 106 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:05,477 INFO L93 Difference]: Finished difference Result 233 states and 303 transitions. [2022-12-13 20:35:05,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 20:35:05,478 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-12-13 20:35:05,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:05,480 INFO L225 Difference]: With dead ends: 233 [2022-12-13 20:35:05,480 INFO L226 Difference]: Without dead ends: 157 [2022-12-13 20:35:05,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 20:35:05,482 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 98 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:05,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 228 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 20:35:05,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-12-13 20:35:05,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 154. [2022-12-13 20:35:05,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 111 states have (on average 1.3333333333333333) internal successors, (148), 126 states have internal predecessors, (148), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-12-13 20:35:05,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 200 transitions. [2022-12-13 20:35:05,506 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 200 transitions. Word has length 29 [2022-12-13 20:35:05,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:05,506 INFO L495 AbstractCegarLoop]: Abstraction has 154 states and 200 transitions. [2022-12-13 20:35:05,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,506 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 200 transitions. [2022-12-13 20:35:05,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-12-13 20:35:05,507 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:05,507 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:05,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 20:35:05,508 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:05,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:05,508 INFO L85 PathProgramCache]: Analyzing trace with hash 1535507548, now seen corresponding path program 1 times [2022-12-13 20:35:05,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:05,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [552722776] [2022-12-13 20:35:05,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:05,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:05,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-12-13 20:35:05,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 20:35:05,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:05,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [552722776] [2022-12-13 20:35:05,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [552722776] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:05,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:05,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 20:35:05,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537443496] [2022-12-13 20:35:05,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:05,608 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 20:35:05,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:05,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 20:35:05,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 20:35:05,609 INFO L87 Difference]: Start difference. First operand 154 states and 200 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:05,694 INFO L93 Difference]: Finished difference Result 408 states and 539 transitions. [2022-12-13 20:35:05,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 20:35:05,694 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-12-13 20:35:05,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:05,697 INFO L225 Difference]: With dead ends: 408 [2022-12-13 20:35:05,697 INFO L226 Difference]: Without dead ends: 261 [2022-12-13 20:35:05,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 20:35:05,700 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 69 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:05,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 402 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 20:35:05,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-12-13 20:35:05,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 248. [2022-12-13 20:35:05,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 181 states have (on average 1.287292817679558) internal successors, (233), 198 states have internal predecessors, (233), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2022-12-13 20:35:05,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 313 transitions. [2022-12-13 20:35:05,737 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 313 transitions. Word has length 32 [2022-12-13 20:35:05,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:05,737 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 313 transitions. [2022-12-13 20:35:05,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 20:35:05,738 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 313 transitions. [2022-12-13 20:35:05,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-13 20:35:05,740 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:05,740 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:05,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 20:35:05,740 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:05,741 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:05,741 INFO L85 PathProgramCache]: Analyzing trace with hash -900743898, now seen corresponding path program 1 times [2022-12-13 20:35:05,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:05,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024032878] [2022-12-13 20:35:05,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:05,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:05,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 20:35:05,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:05,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:05,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-12-13 20:35:05,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:05,866 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 20:35:05,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:05,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024032878] [2022-12-13 20:35:05,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2024032878] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:05,867 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:05,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 20:35:05,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [886414849] [2022-12-13 20:35:05,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:05,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 20:35:05,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:05,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 20:35:05,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 20:35:05,869 INFO L87 Difference]: Start difference. First operand 248 states and 313 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 20:35:06,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:06,017 INFO L93 Difference]: Finished difference Result 551 states and 714 transitions. [2022-12-13 20:35:06,017 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 20:35:06,017 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-12-13 20:35:06,017 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:06,019 INFO L225 Difference]: With dead ends: 551 [2022-12-13 20:35:06,020 INFO L226 Difference]: Without dead ends: 310 [2022-12-13 20:35:06,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 20:35:06,022 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 67 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:06,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 339 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 20:35:06,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310 states. [2022-12-13 20:35:06,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310 to 298. [2022-12-13 20:35:06,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 221 states have (on average 1.262443438914027) internal successors, (279), 238 states have internal predecessors, (279), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-12-13 20:35:06,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 373 transitions. [2022-12-13 20:35:06,056 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 373 transitions. Word has length 55 [2022-12-13 20:35:06,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:06,057 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 373 transitions. [2022-12-13 20:35:06,057 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 20:35:06,057 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 373 transitions. [2022-12-13 20:35:06,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-13 20:35:06,059 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:06,059 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:06,059 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 20:35:06,059 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:06,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:06,060 INFO L85 PathProgramCache]: Analyzing trace with hash -878111644, now seen corresponding path program 1 times [2022-12-13 20:35:06,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:06,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182840632] [2022-12-13 20:35:06,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:06,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:06,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 20:35:06,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:06,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:06,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-12-13 20:35:06,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,129 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 20:35:06,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:06,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182840632] [2022-12-13 20:35:06,129 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182840632] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:06,129 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:06,129 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 20:35:06,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625441231] [2022-12-13 20:35:06,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:06,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 20:35:06,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:06,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 20:35:06,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 20:35:06,131 INFO L87 Difference]: Start difference. First operand 298 states and 373 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 20:35:06,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:06,259 INFO L93 Difference]: Finished difference Result 607 states and 778 transitions. [2022-12-13 20:35:06,260 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 20:35:06,260 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-12-13 20:35:06,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:06,262 INFO L225 Difference]: With dead ends: 607 [2022-12-13 20:35:06,262 INFO L226 Difference]: Without dead ends: 316 [2022-12-13 20:35:06,264 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 20:35:06,265 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 69 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:06,265 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 266 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 20:35:06,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-12-13 20:35:06,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 302. [2022-12-13 20:35:06,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 302 states, 225 states have (on average 1.2577777777777779) internal successors, (283), 242 states have internal predecessors, (283), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-12-13 20:35:06,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 377 transitions. [2022-12-13 20:35:06,291 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 377 transitions. Word has length 55 [2022-12-13 20:35:06,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:06,292 INFO L495 AbstractCegarLoop]: Abstraction has 302 states and 377 transitions. [2022-12-13 20:35:06,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 20:35:06,292 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 377 transitions. [2022-12-13 20:35:06,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-13 20:35:06,293 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:06,294 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:06,294 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 20:35:06,294 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:06,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:06,294 INFO L85 PathProgramCache]: Analyzing trace with hash -603352030, now seen corresponding path program 1 times [2022-12-13 20:35:06,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:06,295 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874154574] [2022-12-13 20:35:06,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:06,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:06,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 20:35:06,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:06,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:06,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-12-13 20:35:06,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,388 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 20:35:06,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:06,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874154574] [2022-12-13 20:35:06,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874154574] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:06,389 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:06,389 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 20:35:06,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043770910] [2022-12-13 20:35:06,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:06,389 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 20:35:06,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:06,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 20:35:06,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 20:35:06,390 INFO L87 Difference]: Start difference. First operand 302 states and 377 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-13 20:35:06,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:06,602 INFO L93 Difference]: Finished difference Result 848 states and 1101 transitions. [2022-12-13 20:35:06,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 20:35:06,602 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 55 [2022-12-13 20:35:06,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:06,605 INFO L225 Difference]: With dead ends: 848 [2022-12-13 20:35:06,606 INFO L226 Difference]: Without dead ends: 553 [2022-12-13 20:35:06,607 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 20:35:06,608 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 223 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:06,608 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 299 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 20:35:06,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 553 states. [2022-12-13 20:35:06,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 553 to 546. [2022-12-13 20:35:06,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 546 states, 409 states have (on average 1.2371638141809291) internal successors, (506), 435 states have internal predecessors, (506), 71 states have call successors, (71), 63 states have call predecessors, (71), 65 states have return successors, (109), 70 states have call predecessors, (109), 71 states have call successors, (109) [2022-12-13 20:35:06,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 546 states to 546 states and 686 transitions. [2022-12-13 20:35:06,643 INFO L78 Accepts]: Start accepts. Automaton has 546 states and 686 transitions. Word has length 55 [2022-12-13 20:35:06,643 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:06,643 INFO L495 AbstractCegarLoop]: Abstraction has 546 states and 686 transitions. [2022-12-13 20:35:06,643 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-13 20:35:06,643 INFO L276 IsEmpty]: Start isEmpty. Operand 546 states and 686 transitions. [2022-12-13 20:35:06,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-12-13 20:35:06,645 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:06,645 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:06,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 20:35:06,645 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:06,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:06,646 INFO L85 PathProgramCache]: Analyzing trace with hash 1816985916, now seen corresponding path program 1 times [2022-12-13 20:35:06,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:06,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [297735669] [2022-12-13 20:35:06,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:06,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:06,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 20:35:06,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 20:35:06,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:06,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:06,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-12-13 20:35:06,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:06,841 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 20:35:06,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:06,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [297735669] [2022-12-13 20:35:06,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [297735669] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:06,842 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:06,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-12-13 20:35:06,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891432201] [2022-12-13 20:35:06,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:06,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-13 20:35:06,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:06,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-13 20:35:06,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-12-13 20:35:06,843 INFO L87 Difference]: Start difference. First operand 546 states and 686 transitions. Second operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-13 20:35:07,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:07,539 INFO L93 Difference]: Finished difference Result 1816 states and 2402 transitions. [2022-12-13 20:35:07,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-13 20:35:07,540 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-12-13 20:35:07,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:07,547 INFO L225 Difference]: With dead ends: 1816 [2022-12-13 20:35:07,547 INFO L226 Difference]: Without dead ends: 1277 [2022-12-13 20:35:07,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-12-13 20:35:07,551 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 426 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 809 mSolverCounterSat, 201 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 436 SdHoareTripleChecker+Valid, 501 SdHoareTripleChecker+Invalid, 1010 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 201 IncrementalHoareTripleChecker+Valid, 809 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:07,551 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [436 Valid, 501 Invalid, 1010 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [201 Valid, 809 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-13 20:35:07,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1277 states. [2022-12-13 20:35:07,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1277 to 1181. [2022-12-13 20:35:07,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1181 states, 870 states have (on average 1.206896551724138) internal successors, (1050), 935 states have internal predecessors, (1050), 168 states have call successors, (168), 122 states have call predecessors, (168), 142 states have return successors, (294), 166 states have call predecessors, (294), 168 states have call successors, (294) [2022-12-13 20:35:07,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1181 states to 1181 states and 1512 transitions. [2022-12-13 20:35:07,627 INFO L78 Accepts]: Start accepts. Automaton has 1181 states and 1512 transitions. Word has length 59 [2022-12-13 20:35:07,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:07,628 INFO L495 AbstractCegarLoop]: Abstraction has 1181 states and 1512 transitions. [2022-12-13 20:35:07,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-13 20:35:07,628 INFO L276 IsEmpty]: Start isEmpty. Operand 1181 states and 1512 transitions. [2022-12-13 20:35:07,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-12-13 20:35:07,630 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:07,630 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:07,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 20:35:07,630 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:07,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:07,631 INFO L85 PathProgramCache]: Analyzing trace with hash -1120995157, now seen corresponding path program 1 times [2022-12-13 20:35:07,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:07,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [410515027] [2022-12-13 20:35:07,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:07,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:07,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 20:35:07,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-12-13 20:35:07,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 20:35:07,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:07,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:07,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-12-13 20:35:07,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-12-13 20:35:07,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-12-13 20:35:07,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:07,715 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-13 20:35:07,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:07,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [410515027] [2022-12-13 20:35:07,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [410515027] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:07,715 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 20:35:07,715 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 20:35:07,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765058] [2022-12-13 20:35:07,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:07,716 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-13 20:35:07,716 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:07,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 20:35:07,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-12-13 20:35:07,717 INFO L87 Difference]: Start difference. First operand 1181 states and 1512 transitions. Second operand has 8 states, 8 states have (on average 8.625) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-12-13 20:35:08,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:08,093 INFO L93 Difference]: Finished difference Result 2006 states and 2557 transitions. [2022-12-13 20:35:08,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 20:35:08,094 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.625) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 90 [2022-12-13 20:35:08,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:08,097 INFO L225 Difference]: With dead ends: 2006 [2022-12-13 20:35:08,097 INFO L226 Difference]: Without dead ends: 832 [2022-12-13 20:35:08,099 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-12-13 20:35:08,100 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 366 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 364 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 376 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 501 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 364 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:08,100 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [376 Valid, 205 Invalid, 501 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 364 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 20:35:08,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 832 states. [2022-12-13 20:35:08,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 832 to 800. [2022-12-13 20:35:08,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 800 states, 594 states have (on average 1.1986531986531987) internal successors, (712), 640 states have internal predecessors, (712), 109 states have call successors, (109), 86 states have call predecessors, (109), 96 states have return successors, (177), 107 states have call predecessors, (177), 109 states have call successors, (177) [2022-12-13 20:35:08,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 800 states to 800 states and 998 transitions. [2022-12-13 20:35:08,137 INFO L78 Accepts]: Start accepts. Automaton has 800 states and 998 transitions. Word has length 90 [2022-12-13 20:35:08,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:08,137 INFO L495 AbstractCegarLoop]: Abstraction has 800 states and 998 transitions. [2022-12-13 20:35:08,137 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.625) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-12-13 20:35:08,138 INFO L276 IsEmpty]: Start isEmpty. Operand 800 states and 998 transitions. [2022-12-13 20:35:08,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-12-13 20:35:08,139 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 20:35:08,139 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:08,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 20:35:08,140 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 20:35:08,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 20:35:08,140 INFO L85 PathProgramCache]: Analyzing trace with hash -849910869, now seen corresponding path program 1 times [2022-12-13 20:35:08,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 20:35:08,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489365346] [2022-12-13 20:35:08,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:08,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 20:35:08,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 20:35:08,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 20:35:08,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 20:35:08,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 20:35:08,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:08,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-12-13 20:35:08,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-12-13 20:35:08,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-12-13 20:35:08,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-12-13 20:35:08,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-12-13 20:35:08,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 20:35:08,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-12-13 20:35:08,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,338 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 16 proven. 5 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-12-13 20:35:08,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 20:35:08,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489365346] [2022-12-13 20:35:08,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489365346] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 20:35:08,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1724301272] [2022-12-13 20:35:08,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 20:35:08,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 20:35:08,339 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 20:35:08,340 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 20:35:08,341 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 20:35:08,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 20:35:08,408 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-13 20:35:08,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 20:35:08,558 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-13 20:35:08,559 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 20:35:08,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1724301272] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 20:35:08,559 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 20:35:08,559 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-12-13 20:35:08,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029144413] [2022-12-13 20:35:08,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 20:35:08,560 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-13 20:35:08,560 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 20:35:08,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 20:35:08,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-12-13 20:35:08,561 INFO L87 Difference]: Start difference. First operand 800 states and 998 transitions. Second operand has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-12-13 20:35:08,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 20:35:08,736 INFO L93 Difference]: Finished difference Result 1804 states and 2248 transitions. [2022-12-13 20:35:08,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-13 20:35:08,737 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 108 [2022-12-13 20:35:08,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 20:35:08,738 INFO L225 Difference]: With dead ends: 1804 [2022-12-13 20:35:08,738 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 20:35:08,742 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-12-13 20:35:08,743 INFO L413 NwaCegarLoop]: 194 mSDtfsCounter, 76 mSDsluCounter, 777 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 971 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 20:35:08,744 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 971 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 20:35:08,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 20:35:08,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 20:35:08,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 20:35:08,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 20:35:08,745 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2022-12-13 20:35:08,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 20:35:08,745 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 20:35:08,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-12-13 20:35:08,745 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 20:35:08,745 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 20:35:08,748 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 20:35:08,755 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 20:35:08,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-13 20:35:08,951 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 20:35:12,138 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 762 769) no Hoare annotation was computed. [2022-12-13 20:35:12,138 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 762 769) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse0 .cse7)) (.cse5 (not .cse7)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse5 .cse2 .cse6) (or .cse4 .cse5 .cse3 .cse6)))) [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 762 769) no Hoare annotation was computed. [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 678 684) no Hoare annotation was computed. [2022-12-13 20:35:12,139 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 678 684) the Hoare annotation is: true [2022-12-13 20:35:12,139 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse3 .cse2 .cse5 .cse4) (or .cse3 .cse1 .cse2 .cse5))) [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 654 677) no Hoare annotation was computed. [2022-12-13 20:35:12,139 INFO L895 garLoopResultBuilder]: At program point L726(line 726) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse2 .cse4) (or .cse3 .cse0 .cse1))) [2022-12-13 20:35:12,139 INFO L895 garLoopResultBuilder]: At program point L627(line 627) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse7 .cse6)) (.cse3 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse0 .cse5 .cse2 .cse6) (or .cse7 .cse5 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse5 (<= 2 ~waterLevel~0) .cse4) (or .cse0 .cse5 .cse4 .cse6)))) [2022-12-13 20:35:12,139 INFO L895 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4) (or .cse3 .cse5 .cse4) (or .cse3 .cse1 .cse5) (or .cse3 .cse1 .cse2) (or .cse1 .cse5 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~6#1|))))) [2022-12-13 20:35:12,139 INFO L899 garLoopResultBuilder]: For program point L627-1(line 627) no Hoare annotation was computed. [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2022-12-13 20:35:12,140 INFO L899 garLoopResultBuilder]: For program point L718-1(line 718) no Hoare annotation was computed. [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse5 .cse4) (or .cse0 .cse5 .cse2))) [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point L731-1(lines 712 736) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse0 .cse5 .cse6) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3))) [2022-12-13 20:35:12,140 INFO L899 garLoopResultBuilder]: For program point L665-1(lines 665 671) no Hoare annotation was computed. [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 869 876) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse2 .cse1 .cse4) (or .cse0 .cse3))) [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 654 677) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse4 .cse6) (or .cse5 .cse2 .cse6)))) [2022-12-13 20:35:12,140 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-12-13 20:35:12,140 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2022-12-13 20:35:12,140 INFO L899 garLoopResultBuilder]: For program point L633(lines 633 639) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L629(lines 629 642) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L895 garLoopResultBuilder]: At program point L629-1(lines 621 645) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse7 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse8)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 .cse5 .cse3 .cse2) (or .cse0 .cse6 (and .cse1 .cse7 .cse2) .cse4) (or .cse5 (and .cse1 .cse7 .cse8) .cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) (and (<= 2 ~waterLevel~0) .cse7)) (or .cse5 .cse3 (and .cse1 .cse8)) (or .cse0 .cse5 .cse6 .cse2)))) [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L658-1(lines 657 676) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L720(lines 720 728) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 733) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 654 677) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 781 789) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 (and .cse4 .cse5 .cse3) .cse6) (or .cse1 (and .cse4 .cse5) .cse2) (or .cse0 .cse7 .cse6) (or .cse1 .cse7))) [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L873(line 873) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 873) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-12-13 20:35:12,141 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-12-13 20:35:12,141 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 182) the Hoare annotation is: true [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L898-1(lines 898 904) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 860 867) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L899 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 216 225) the Hoare annotation is: true [2022-12-13 20:35:12,142 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 20:35:12,142 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 229 251) the Hoare annotation is: true [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L239(lines 239 246) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L902 garLoopResultBuilder]: At program point L941(lines 878 945) the Hoare annotation is: true [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L239-2(lines 239 246) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L908(lines 908 914) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L908-1(lines 908 914) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point L900(line 900) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point L938(lines 887 939) the Hoare annotation is: false [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 965 971) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 20:35:12,143 INFO L899 garLoopResultBuilder]: For program point L926(lines 926 932) no Hoare annotation was computed. [2022-12-13 20:35:12,143 INFO L895 garLoopResultBuilder]: At program point L926-2(lines 918 933) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse5 .cse4 .cse2))) [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L889(lines 888 937) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 933) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 845 859) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 972 980) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point L935(lines 888 937) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L898(lines 898 904) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse4 .cse2) (or .cse0 .cse5 .cse1 .cse2))) [2022-12-13 20:35:12,144 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse2)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) .cse2))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1)))) [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L694(lines 694 702) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L690(lines 690 707) no Hoare annotation was computed. [2022-12-13 20:35:12,144 INFO L899 garLoopResultBuilder]: For program point L752(lines 752 758) no Hoare annotation was computed. [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point L750(line 750) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point L752-2(lines 745 761) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0) .cse1) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-12-13 20:35:12,145 INFO L899 garLoopResultBuilder]: For program point L750-1(line 750) no Hoare annotation was computed. [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__highWaterSensor_returnLabel#1(lines 737 744) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 686 710) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-12-13 20:35:12,145 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 839) no Hoare annotation was computed. [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 136 149) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse0 .cse2 .cse4) (not (= ~methaneLevelCritical~0 0)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4)))) [2022-12-13 20:35:12,145 INFO L899 garLoopResultBuilder]: For program point L835-2(lines 835 839) no Hoare annotation was computed. [2022-12-13 20:35:12,145 INFO L895 garLoopResultBuilder]: At program point L705(line 705) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-12-13 20:35:12,145 INFO L899 garLoopResultBuilder]: For program point L705-1(lines 686 710) no Hoare annotation was computed. [2022-12-13 20:35:12,148 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 826 844) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse4 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse1 .cse2 .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3))))) [2022-12-13 20:35:12,148 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-12-13 20:35:12,148 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 686 710) no Hoare annotation was computed. [2022-12-13 20:35:12,148 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 770 780) no Hoare annotation was computed. [2022-12-13 20:35:12,148 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 770 780) the Hoare annotation is: true [2022-12-13 20:35:12,149 INFO L902 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: true [2022-12-13 20:35:12,149 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 770 780) no Hoare annotation was computed. [2022-12-13 20:35:12,149 INFO L899 garLoopResultBuilder]: For program point L775-1(line 775) no Hoare annotation was computed. [2022-12-13 20:35:12,151 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 20:35:12,153 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 20:35:12,168 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 08:35:12 BoogieIcfgContainer [2022-12-13 20:35:12,168 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 20:35:12,169 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 20:35:12,169 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 20:35:12,169 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 20:35:12,169 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 08:35:04" (3/4) ... [2022-12-13 20:35:12,171 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 20:35:12,176 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 20:35:12,177 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 20:35:12,177 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-12-13 20:35:12,177 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-12-13 20:35:12,184 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-12-13 20:35:12,184 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 20:35:12,184 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 20:35:12,184 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 20:35:12,185 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 20:35:12,202 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-12-13 20:35:12,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-12-13 20:35:12,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || (2 <= waterLevel && tmp == 0))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-12-13 20:35:12,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-12-13 20:35:12,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-12-13 20:35:12,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-12-13 20:35:12,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-12-13 20:35:12,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-12-13 20:35:12,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-12-13 20:35:12,218 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 20:35:12,218 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 20:35:12,219 INFO L158 Benchmark]: Toolchain (without parser) took 8013.21ms. Allocated memory was 130.0MB in the beginning and 157.3MB in the end (delta: 27.3MB). Free memory was 88.7MB in the beginning and 119.9MB in the end (delta: -31.2MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 20:35:12,219 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 98.6MB. Free memory is still 48.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 20:35:12,219 INFO L158 Benchmark]: CACSL2BoogieTranslator took 271.25ms. Allocated memory is still 130.0MB. Free memory was 88.3MB in the beginning and 69.9MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,219 INFO L158 Benchmark]: Boogie Procedure Inliner took 30.48ms. Allocated memory is still 130.0MB. Free memory was 69.9MB in the beginning and 67.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,219 INFO L158 Benchmark]: Boogie Preprocessor took 18.15ms. Allocated memory is still 130.0MB. Free memory was 67.6MB in the beginning and 66.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,220 INFO L158 Benchmark]: RCFGBuilder took 370.37ms. Allocated memory is still 130.0MB. Free memory was 66.0MB in the beginning and 90.5MB in the end (delta: -24.5MB). Peak memory consumption was 9.6MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,220 INFO L158 Benchmark]: TraceAbstraction took 7267.88ms. Allocated memory was 130.0MB in the beginning and 157.3MB in the end (delta: 27.3MB). Free memory was 89.6MB in the beginning and 126.2MB in the end (delta: -36.6MB). Peak memory consumption was 82.5MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,220 INFO L158 Benchmark]: Witness Printer took 49.58ms. Allocated memory is still 157.3MB. Free memory was 125.1MB in the beginning and 119.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-13 20:35:12,221 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 98.6MB. Free memory is still 48.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 271.25ms. Allocated memory is still 130.0MB. Free memory was 88.3MB in the beginning and 69.9MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 30.48ms. Allocated memory is still 130.0MB. Free memory was 69.9MB in the beginning and 67.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.15ms. Allocated memory is still 130.0MB. Free memory was 67.6MB in the beginning and 66.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 370.37ms. Allocated memory is still 130.0MB. Free memory was 66.0MB in the beginning and 90.5MB in the end (delta: -24.5MB). Peak memory consumption was 9.6MB. Max. memory is 16.1GB. * TraceAbstraction took 7267.88ms. Allocated memory was 130.0MB in the beginning and 157.3MB in the end (delta: 27.3MB). Free memory was 89.6MB in the beginning and 126.2MB in the end (delta: -36.6MB). Peak memory consumption was 82.5MB. Max. memory is 16.1GB. * Witness Printer took 49.58ms. Allocated memory is still 157.3MB. Free memory was 125.1MB in the beginning and 119.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 873]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 101 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.2s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1457 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1411 mSDsluCounter, 3526 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2441 mSDsCounter, 464 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1761 IncrementalHoareTripleChecker+Invalid, 2225 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 464 mSolverCounterUnsat, 1085 mSDtfsCounter, 1761 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 295 GetRequests, 204 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 341 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1181occurred in iteration=8, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 177 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2166 PreInvPairs, 2611 NumberOfFragments, 1766 HoareAnnotationTreeSize, 2166 FomulaSimplifications, 5879 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 46 FomulaSimplificationsInter, 15321 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 638 NumberOfCodeBlocks, 638 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 627 ConstructedInterpolants, 0 QuantifiedInterpolants, 1022 SizeOfPredicates, 3 NumberOfNonLiveVariables, 349 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 122/127 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((1 <= methaneLevelCritical && 1 == systemActive) && splverifierCounter == 0) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 878]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || (2 <= waterLevel && tmp == 0))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 737]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 745]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 712]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 216]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-13 20:35:12,243 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e99b07e3-2403-4739-93cc-8fd64e4c0bdb/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE