./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:48:47,397 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:48:47,479 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:48:47,498 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:48:47,499 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:48:47,550 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:48:47,552 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:48:47,553 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:48:47,555 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:48:47,561 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:48:47,562 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:48:47,563 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:48:47,564 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:48:47,566 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:48:47,567 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:48:47,567 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:48:47,568 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:48:47,568 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:48:47,569 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:48:47,570 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:48:47,571 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:48:47,571 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:48:47,572 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:48:47,573 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:48:47,573 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:48:47,574 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:48:47,575 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:48:47,576 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:48:47,576 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:47,577 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:48:47,579 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:48:47,579 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:48:47,579 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:48:47,580 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:48:47,580 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:48:47,581 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:48:47,581 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:48:47,581 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:48:47,582 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:48:47,582 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 [2023-11-06 22:48:47,946 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:48:47,983 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:48:47,988 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:48:47,989 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:48:47,990 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:48:47,991 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2023-11-06 22:48:51,136 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:48:51,500 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:48:51,501 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2023-11-06 22:48:51,527 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/data/b8ecc0d8c/25db81b33fd3443bb2e147851a76701e/FLAG33e3332a1 [2023-11-06 22:48:51,545 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/data/b8ecc0d8c/25db81b33fd3443bb2e147851a76701e [2023-11-06 22:48:51,552 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:48:51,555 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:48:51,559 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:51,559 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:48:51,564 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:48:51,567 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:51" (1/1) ... [2023-11-06 22:48:51,568 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6dea3632 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:51, skipping insertion in model container [2023-11-06 22:48:51,569 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:51" (1/1) ... [2023-11-06 22:48:51,640 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:48:51,825 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2023-11-06 22:48:51,923 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:51,951 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:48:51,961 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 22:48:51,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] [2023-11-06 22:48:51,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [159] [2023-11-06 22:48:51,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [186] [2023-11-06 22:48:51,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [288] [2023-11-06 22:48:51,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [323] [2023-11-06 22:48:51,969 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] [2023-11-06 22:48:51,969 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [754] [2023-11-06 22:48:51,985 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2023-11-06 22:48:52,081 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:52,120 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:48:52,121 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52 WrapperNode [2023-11-06 22:48:52,121 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:52,122 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:52,122 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:48:52,123 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:48:52,131 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,145 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,175 INFO L138 Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 185 [2023-11-06 22:48:52,177 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:52,178 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:48:52,179 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:48:52,179 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:48:52,188 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,189 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,191 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,192 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,198 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,203 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,205 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,206 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,210 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:48:52,210 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:48:52,211 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:48:52,211 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:48:52,212 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:52,235 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:52,248 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:48:52,264 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:48:52,300 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:48:52,301 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:48:52,301 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:48:52,301 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:48:52,303 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:48:52,304 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:48:52,304 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:48:52,304 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:48:52,304 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:48:52,304 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:48:52,304 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:48:52,305 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:48:52,305 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:48:52,305 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:48:52,305 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:48:52,306 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:48:52,306 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:48:52,307 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:48:52,307 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:48:52,307 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:48:52,429 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:48:52,433 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:48:52,839 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:48:52,847 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:48:52,847 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:48:52,849 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:52 BoogieIcfgContainer [2023-11-06 22:48:52,849 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:48:52,852 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:48:52,852 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:48:52,856 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:48:52,856 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:48:51" (1/3) ... [2023-11-06 22:48:52,857 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@140b4d2a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:52, skipping insertion in model container [2023-11-06 22:48:52,857 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (2/3) ... [2023-11-06 22:48:52,858 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@140b4d2a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:52, skipping insertion in model container [2023-11-06 22:48:52,858 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:52" (3/3) ... [2023-11-06 22:48:52,863 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product45.cil.c [2023-11-06 22:48:52,887 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:48:52,887 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:48:52,940 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:48:52,947 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@494b4a6, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:48:52,947 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:48:52,952 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:48:52,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-06 22:48:52,961 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:52,962 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:52,962 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:52,967 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:52,967 INFO L85 PathProgramCache]: Analyzing trace with hash 775812870, now seen corresponding path program 1 times [2023-11-06 22:48:52,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:52,978 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [439903152] [2023-11-06 22:48:52,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:52,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:53,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:48:53,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,197 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:53,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:53,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [439903152] [2023-11-06 22:48:53,199 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [439903152] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:53,199 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:53,200 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:48:53,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1062156287] [2023-11-06 22:48:53,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:53,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:48:53,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:53,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:48:53,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:53,239 INFO L87 Difference]: Start difference. First operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:53,274 INFO L93 Difference]: Finished difference Result 178 states and 241 transitions. [2023-11-06 22:48:53,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:48:53,282 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-06 22:48:53,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:53,291 INFO L225 Difference]: With dead ends: 178 [2023-11-06 22:48:53,291 INFO L226 Difference]: Without dead ends: 84 [2023-11-06 22:48:53,295 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:53,299 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:53,300 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:53,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-06 22:48:53,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2023-11-06 22:48:53,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:48:53,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2023-11-06 22:48:53,345 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 23 [2023-11-06 22:48:53,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:53,346 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2023-11-06 22:48:53,346 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,346 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2023-11-06 22:48:53,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:48:53,349 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:53,349 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:53,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:48:53,350 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:53,351 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:53,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1120816717, now seen corresponding path program 1 times [2023-11-06 22:48:53,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:53,351 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123894989] [2023-11-06 22:48:53,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:53,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:53,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:48:53,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:53,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:53,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123894989] [2023-11-06 22:48:53,473 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123894989] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:53,473 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:53,473 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:53,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126881369] [2023-11-06 22:48:53,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:53,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:53,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:53,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:53,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:53,476 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:53,503 INFO L93 Difference]: Finished difference Result 134 states and 172 transitions. [2023-11-06 22:48:53,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:53,506 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-06 22:48:53,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:53,508 INFO L225 Difference]: With dead ends: 134 [2023-11-06 22:48:53,512 INFO L226 Difference]: Without dead ends: 75 [2023-11-06 22:48:53,513 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:53,515 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 12 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:53,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 174 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:53,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-06 22:48:53,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-06 22:48:53,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:48:53,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2023-11-06 22:48:53,545 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 24 [2023-11-06 22:48:53,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:53,546 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2023-11-06 22:48:53,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,546 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2023-11-06 22:48:53,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 22:48:53,548 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:53,548 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:53,548 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:48:53,549 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:53,549 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:53,550 INFO L85 PathProgramCache]: Analyzing trace with hash 1182721273, now seen corresponding path program 1 times [2023-11-06 22:48:53,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:53,550 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501349347] [2023-11-06 22:48:53,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:53,551 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:53,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:53,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:53,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:53,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501349347] [2023-11-06 22:48:53,732 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501349347] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:53,733 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:53,735 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:53,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [563259833] [2023-11-06 22:48:53,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:53,737 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:53,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:53,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:53,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:53,740 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:53,784 INFO L93 Difference]: Finished difference Result 143 states and 186 transitions. [2023-11-06 22:48:53,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:53,785 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-06 22:48:53,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:53,787 INFO L225 Difference]: With dead ends: 143 [2023-11-06 22:48:53,789 INFO L226 Difference]: Without dead ends: 75 [2023-11-06 22:48:53,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:53,794 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 78 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:53,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 94 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:53,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-06 22:48:53,812 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-06 22:48:53,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:48:53,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 95 transitions. [2023-11-06 22:48:53,815 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 95 transitions. Word has length 28 [2023-11-06 22:48:53,817 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:53,817 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 95 transitions. [2023-11-06 22:48:53,817 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:53,818 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2023-11-06 22:48:53,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 22:48:53,820 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:53,820 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:53,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:48:53,821 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:53,821 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:53,822 INFO L85 PathProgramCache]: Analyzing trace with hash 2028009394, now seen corresponding path program 1 times [2023-11-06 22:48:53,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:53,822 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303191024] [2023-11-06 22:48:53,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:53,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:53,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:53,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:53,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:48:53,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:53,971 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:53,971 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303191024] [2023-11-06 22:48:53,971 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303191024] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:53,971 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:53,971 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:53,972 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1942614691] [2023-11-06 22:48:53,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:53,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:53,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:53,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:53,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:53,974 INFO L87 Difference]: Start difference. First operand 75 states and 95 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:48:54,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:54,230 INFO L93 Difference]: Finished difference Result 220 states and 277 transitions. [2023-11-06 22:48:54,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:54,231 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2023-11-06 22:48:54,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:54,237 INFO L225 Difference]: With dead ends: 220 [2023-11-06 22:48:54,238 INFO L226 Difference]: Without dead ends: 152 [2023-11-06 22:48:54,239 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:48:54,240 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 184 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:54,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [186 Valid, 255 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:54,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2023-11-06 22:48:54,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 146. [2023-11-06 22:48:54,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-06 22:48:54,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 177 transitions. [2023-11-06 22:48:54,300 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 177 transitions. Word has length 38 [2023-11-06 22:48:54,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:54,301 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 177 transitions. [2023-11-06 22:48:54,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:48:54,302 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 177 transitions. [2023-11-06 22:48:54,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-06 22:48:54,304 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:54,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:54,305 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:48:54,305 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:54,306 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:54,306 INFO L85 PathProgramCache]: Analyzing trace with hash 300684586, now seen corresponding path program 1 times [2023-11-06 22:48:54,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:54,306 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498677954] [2023-11-06 22:48:54,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:54,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:54,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:54,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:54,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:48:54,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:54,545 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:54,545 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498677954] [2023-11-06 22:48:54,545 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498677954] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:54,545 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:54,546 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:54,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683002376] [2023-11-06 22:48:54,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:54,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:54,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:54,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:54,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:54,549 INFO L87 Difference]: Start difference. First operand 146 states and 177 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:48:54,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:54,883 INFO L93 Difference]: Finished difference Result 158 states and 188 transitions. [2023-11-06 22:48:54,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:48:54,884 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2023-11-06 22:48:54,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:54,887 INFO L225 Difference]: With dead ends: 158 [2023-11-06 22:48:54,888 INFO L226 Difference]: Without dead ends: 156 [2023-11-06 22:48:54,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:48:54,890 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 129 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 330 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:54,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 330 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:54,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2023-11-06 22:48:54,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 146. [2023-11-06 22:48:54,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2293577981651376) internal successors, (134), 117 states have internal predecessors, (134), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-06 22:48:54,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 175 transitions. [2023-11-06 22:48:54,920 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 175 transitions. Word has length 44 [2023-11-06 22:48:54,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:54,921 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 175 transitions. [2023-11-06 22:48:54,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:48:54,922 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 175 transitions. [2023-11-06 22:48:54,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-06 22:48:54,924 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:54,924 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:54,925 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:48:54,925 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:54,925 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:54,926 INFO L85 PathProgramCache]: Analyzing trace with hash 467205787, now seen corresponding path program 1 times [2023-11-06 22:48:54,926 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:54,926 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422538853] [2023-11-06 22:48:54,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:54,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:54,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:55,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:55,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:55,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:48:55,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,109 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:55,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:55,109 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422538853] [2023-11-06 22:48:55,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422538853] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:55,110 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:55,110 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:55,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271408869] [2023-11-06 22:48:55,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:55,111 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:55,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:55,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:55,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:55,113 INFO L87 Difference]: Start difference. First operand 146 states and 175 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:55,356 INFO L93 Difference]: Finished difference Result 295 states and 360 transitions. [2023-11-06 22:48:55,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:55,357 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2023-11-06 22:48:55,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:55,362 INFO L225 Difference]: With dead ends: 295 [2023-11-06 22:48:55,362 INFO L226 Difference]: Without dead ends: 156 [2023-11-06 22:48:55,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:48:55,370 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 62 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:55,373 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 322 Invalid, 163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:55,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2023-11-06 22:48:55,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 149. [2023-11-06 22:48:55,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 112 states have (on average 1.2232142857142858) internal successors, (137), 120 states have internal predecessors, (137), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-06 22:48:55,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 178 transitions. [2023-11-06 22:48:55,426 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 178 transitions. Word has length 54 [2023-11-06 22:48:55,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:55,427 INFO L495 AbstractCegarLoop]: Abstraction has 149 states and 178 transitions. [2023-11-06 22:48:55,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,428 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 178 transitions. [2023-11-06 22:48:55,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-06 22:48:55,435 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:55,435 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:55,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:48:55,438 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:55,440 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:55,441 INFO L85 PathProgramCache]: Analyzing trace with hash 489838041, now seen corresponding path program 1 times [2023-11-06 22:48:55,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:55,442 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333390267] [2023-11-06 22:48:55,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:55,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:55,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:55,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:55,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:55,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:48:55,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,667 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:55,667 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:55,668 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333390267] [2023-11-06 22:48:55,668 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333390267] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:55,668 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:55,668 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:55,669 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [713029992] [2023-11-06 22:48:55,669 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:55,669 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:55,669 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:55,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:55,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:55,671 INFO L87 Difference]: Start difference. First operand 149 states and 178 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:55,881 INFO L93 Difference]: Finished difference Result 301 states and 366 transitions. [2023-11-06 22:48:55,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:55,882 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2023-11-06 22:48:55,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:55,884 INFO L225 Difference]: With dead ends: 301 [2023-11-06 22:48:55,884 INFO L226 Difference]: Without dead ends: 159 [2023-11-06 22:48:55,886 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:48:55,891 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 138 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:55,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 252 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:55,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2023-11-06 22:48:55,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 151. [2023-11-06 22:48:55,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 114 states have (on average 1.219298245614035) internal successors, (139), 122 states have internal predecessors, (139), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-06 22:48:55,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 180 transitions. [2023-11-06 22:48:55,956 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 180 transitions. Word has length 54 [2023-11-06 22:48:55,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:55,957 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 180 transitions. [2023-11-06 22:48:55,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,957 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 180 transitions. [2023-11-06 22:48:55,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-06 22:48:55,958 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:55,958 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:55,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:48:55,959 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:55,959 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:55,963 INFO L85 PathProgramCache]: Analyzing trace with hash 764597655, now seen corresponding path program 1 times [2023-11-06 22:48:55,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:55,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743179720] [2023-11-06 22:48:55,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:55,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:55,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:56,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:56,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:56,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:48:56,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,188 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:56,189 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:56,189 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743179720] [2023-11-06 22:48:56,189 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743179720] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:56,189 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:56,190 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:56,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040360692] [2023-11-06 22:48:56,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:56,194 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:56,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:56,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:56,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:56,196 INFO L87 Difference]: Start difference. First operand 151 states and 180 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-06 22:48:56,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:56,493 INFO L93 Difference]: Finished difference Result 409 states and 514 transitions. [2023-11-06 22:48:56,495 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:56,495 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 54 [2023-11-06 22:48:56,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:56,501 INFO L225 Difference]: With dead ends: 409 [2023-11-06 22:48:56,501 INFO L226 Difference]: Without dead ends: 265 [2023-11-06 22:48:56,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:48:56,504 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 197 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 262 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:56,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 262 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:56,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2023-11-06 22:48:56,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 263. [2023-11-06 22:48:56,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 263 states, 198 states have (on average 1.2171717171717171) internal successors, (241), 210 states have internal predecessors, (241), 33 states have call successors, (33), 30 states have call predecessors, (33), 31 states have return successors, (48), 33 states have call predecessors, (48), 33 states have call successors, (48) [2023-11-06 22:48:56,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 322 transitions. [2023-11-06 22:48:56,553 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 322 transitions. Word has length 54 [2023-11-06 22:48:56,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:56,554 INFO L495 AbstractCegarLoop]: Abstraction has 263 states and 322 transitions. [2023-11-06 22:48:56,554 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-06 22:48:56,554 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 322 transitions. [2023-11-06 22:48:56,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-06 22:48:56,556 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:56,557 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:56,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:48:56,557 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:56,558 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:56,558 INFO L85 PathProgramCache]: Analyzing trace with hash 1731524797, now seen corresponding path program 1 times [2023-11-06 22:48:56,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:56,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935230405] [2023-11-06 22:48:56,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:56,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:56,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:56,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:48:56,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:56,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:56,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-06 22:48:56,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,855 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:56,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:56,855 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935230405] [2023-11-06 22:48:56,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935230405] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:56,856 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:56,856 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 22:48:56,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [399208359] [2023-11-06 22:48:56,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:56,857 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:48:56,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:56,858 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:48:56,858 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:48:56,859 INFO L87 Difference]: Start difference. First operand 263 states and 322 transitions. Second operand has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:57,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:57,907 INFO L93 Difference]: Finished difference Result 803 states and 1018 transitions. [2023-11-06 22:48:57,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:48:57,907 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2023-11-06 22:48:57,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:57,913 INFO L225 Difference]: With dead ends: 803 [2023-11-06 22:48:57,913 INFO L226 Difference]: Without dead ends: 547 [2023-11-06 22:48:57,915 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-06 22:48:57,916 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 367 mSDsluCounter, 379 mSDsCounter, 0 mSdLazyCounter, 529 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 374 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 664 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 529 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:57,916 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [374 Valid, 434 Invalid, 664 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 529 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:48:57,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2023-11-06 22:48:58,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 538. [2023-11-06 22:48:58,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 538 states, 400 states have (on average 1.1875) internal successors, (475), 428 states have internal predecessors, (475), 72 states have call successors, (72), 58 states have call predecessors, (72), 65 states have return successors, (111), 71 states have call predecessors, (111), 72 states have call successors, (111) [2023-11-06 22:48:58,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 538 states to 538 states and 658 transitions. [2023-11-06 22:48:58,023 INFO L78 Accepts]: Start accepts. Automaton has 538 states and 658 transitions. Word has length 58 [2023-11-06 22:48:58,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:58,024 INFO L495 AbstractCegarLoop]: Abstraction has 538 states and 658 transitions. [2023-11-06 22:48:58,024 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:58,025 INFO L276 IsEmpty]: Start isEmpty. Operand 538 states and 658 transitions. [2023-11-06 22:48:58,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2023-11-06 22:48:58,027 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:58,028 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:58,028 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:48:58,028 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:58,029 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:58,029 INFO L85 PathProgramCache]: Analyzing trace with hash 1836694146, now seen corresponding path program 1 times [2023-11-06 22:48:58,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:58,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469192734] [2023-11-06 22:48:58,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:58,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:58,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:58,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:58,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:48:58,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:58,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:58,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:48:58,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 22:48:58,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-06 22:48:58,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:58,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2023-11-06 22:48:58,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:58,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2023-11-06 22:48:58,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,444 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:48:58,444 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:58,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469192734] [2023-11-06 22:48:58,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469192734] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:48:58,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [147986176] [2023-11-06 22:48:58,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:58,445 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:48:58,446 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:58,449 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:48:58,472 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:48:58,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:58,583 INFO L262 TraceCheckSpWp]: Trace formula consists of 339 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:48:58,595 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:48:58,792 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:48:58,792 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:48:58,793 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [147986176] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:58,793 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:48:58,793 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-06 22:48:58,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259336070] [2023-11-06 22:48:58,794 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:58,794 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:48:58,794 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:58,795 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:48:58,795 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:48:58,796 INFO L87 Difference]: Start difference. First operand 538 states and 658 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:48:59,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:59,027 INFO L93 Difference]: Finished difference Result 1172 states and 1432 transitions. [2023-11-06 22:48:59,027 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:48:59,028 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2023-11-06 22:48:59,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:59,029 INFO L225 Difference]: With dead ends: 1172 [2023-11-06 22:48:59,029 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:48:59,032 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:48:59,033 INFO L413 NwaCegarLoop]: 163 mSDtfsCounter, 59 mSDsluCounter, 649 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 812 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:59,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 812 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:59,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:48:59,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:48:59,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:48:59,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:48:59,035 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2023-11-06 22:48:59,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:59,036 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:48:59,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:48:59,036 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:48:59,036 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:48:59,039 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:48:59,048 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-06 22:48:59,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:48:59,249 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:49:02,680 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 784 790) no Hoare annotation was computed. [2023-11-06 22:49:02,681 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 784 790) the Hoare annotation is: true [2023-11-06 22:49:02,681 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) .cse0 (< |old(~methaneLevelCritical~0)| 1)) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-06 22:49:02,681 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:49:02,681 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:49:02,682 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,682 INFO L899 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2023-11-06 22:49:02,682 INFO L895 garLoopResultBuilder]: At program point L824(line 824) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-06 22:49:02,682 INFO L899 garLoopResultBuilder]: For program point L824-1(line 824) no Hoare annotation was computed. [2023-11-06 22:49:02,682 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 760 783) no Hoare annotation was computed. [2023-11-06 22:49:02,682 INFO L895 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,683 INFO L895 garLoopResultBuilder]: At program point L837-1(lines 818 842) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2 (and .cse1 .cse3 .cse4) (< ~methaneLevelCritical~0 1)) (or (and .cse1 .cse4) .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4))))) [2023-11-06 22:49:02,683 INFO L899 garLoopResultBuilder]: For program point L771-1(lines 771 777) no Hoare annotation was computed. [2023-11-06 22:49:02,683 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2023-11-06 22:49:02,683 INFO L899 garLoopResultBuilder]: For program point L169(lines 169 182) no Hoare annotation was computed. [2023-11-06 22:49:02,683 INFO L895 garLoopResultBuilder]: At program point L169-1(lines 161 185) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not .cse2)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (and .cse4 .cse1) (< ~methaneLevelCritical~0 1)) (let ((.cse5 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0))) (or (and .cse5 (<= 2 ~waterLevel~0) .cse3) .cse0 (not (= ~methaneLevelCritical~0 0)) (and .cse4 .cse1 .cse5) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5) (and .cse1 .cse5 .cse2 .cse3)))))) [2023-11-06 22:49:02,683 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 763 782) no Hoare annotation was computed. [2023-11-06 22:49:02,683 INFO L899 garLoopResultBuilder]: For program point L826(lines 826 834) no Hoare annotation was computed. [2023-11-06 22:49:02,684 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 839) no Hoare annotation was computed. [2023-11-06 22:49:02,684 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 151 158) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,684 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 760 783) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,684 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 22:49:02,684 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 868 875) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2 (< ~methaneLevelCritical~0 1)) (or .cse2 (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0))))) [2023-11-06 22:49:02,684 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-06 22:49:02,684 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 760 783) no Hoare annotation was computed. [2023-11-06 22:49:02,685 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 887 895) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0))) (or .cse0 (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2) (< ~methaneLevelCritical~0 1))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2023-11-06 22:49:02,685 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2023-11-06 22:49:02,686 INFO L895 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse5 .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (and .cse2 .cse5))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3 (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4)) (or .cse0 .cse1 .cse3 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:02,686 INFO L899 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2023-11-06 22:49:02,686 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2023-11-06 22:49:02,687 INFO L902 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2023-11-06 22:49:02,687 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2023-11-06 22:49:02,687 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2023-11-06 22:49:02,687 INFO L902 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2023-11-06 22:49:02,687 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 189 218) the Hoare annotation is: true [2023-11-06 22:49:02,688 INFO L899 garLoopResultBuilder]: For program point L200(line 200) no Hoare annotation was computed. [2023-11-06 22:49:02,688 INFO L902 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2023-11-06 22:49:02,688 INFO L902 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2023-11-06 22:49:02,688 INFO L899 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2023-11-06 22:49:02,688 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-06 22:49:02,688 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:49:02,688 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:49:02,689 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 282) no Hoare annotation was computed. [2023-11-06 22:49:02,689 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 282) no Hoare annotation was computed. [2023-11-06 22:49:02,689 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 252 261) the Hoare annotation is: true [2023-11-06 22:49:02,689 INFO L895 garLoopResultBuilder]: At program point L746(lines 699 747) the Hoare annotation is: false [2023-11-06 22:49:02,689 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 300 306) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:49:02,689 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 265 287) the Hoare annotation is: true [2023-11-06 22:49:02,690 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:49:02,690 INFO L899 garLoopResultBuilder]: For program point L701(lines 700 745) no Hoare annotation was computed. [2023-11-06 22:49:02,690 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:49:02,690 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 741) no Hoare annotation was computed. [2023-11-06 22:49:02,690 INFO L895 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:49:02,690 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 244 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:49:02,691 INFO L895 garLoopResultBuilder]: At program point L743(lines 700 745) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:49:02,691 INFO L899 garLoopResultBuilder]: For program point L710(lines 710 716) no Hoare annotation was computed. [2023-11-06 22:49:02,691 INFO L899 garLoopResultBuilder]: For program point L710-1(lines 710 716) no Hoare annotation was computed. [2023-11-06 22:49:02,691 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:49:02,691 INFO L899 garLoopResultBuilder]: For program point L702(lines 702 706) no Hoare annotation was computed. [2023-11-06 22:49:02,691 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:49:02,692 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 307 313) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:49:02,692 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 740) no Hoare annotation was computed. [2023-11-06 22:49:02,692 INFO L895 garLoopResultBuilder]: At program point L736-2(lines 730 741) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2023-11-06 22:49:02,692 INFO L899 garLoopResultBuilder]: For program point L720(lines 720 726) no Hoare annotation was computed. [2023-11-06 22:49:02,692 INFO L899 garLoopResultBuilder]: For program point L720-1(lines 720 726) no Hoare annotation was computed. [2023-11-06 22:49:02,692 INFO L902 garLoopResultBuilder]: At program point L749(lines 690 753) the Hoare annotation is: true [2023-11-06 22:49:02,693 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 314 322) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:49:02,693 INFO L895 garLoopResultBuilder]: At program point L712(line 712) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:49:02,693 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:49:02,693 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:49:02,693 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,694 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__highWaterSensor_returnLabel#1(lines 843 850) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (< ~methaneLevelCritical~0 1)) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2023-11-06 22:49:02,694 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 792 816) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:02,694 INFO L895 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse3)) (.cse1 (and (= ~pumpRunning~0 0) .cse3 .cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not .cse2) .cse0 .cse1 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:02,696 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse6)) (.cse3 (and .cse5 (<= 2 ~waterLevel~0) .cse6 .cse1)) (.cse4 (and .cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 .cse4) (or (not .cse1) .cse0 .cse3 .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:02,696 INFO L899 garLoopResultBuilder]: For program point L800(lines 800 808) no Hoare annotation was computed. [2023-11-06 22:49:02,696 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 932 950) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse1 (and .cse4 .cse5 .cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1| 0)))) (.cse2 (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse3))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or (not .cse3) .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:02,696 INFO L899 garLoopResultBuilder]: For program point L796(lines 796 813) no Hoare annotation was computed. [2023-11-06 22:49:02,697 INFO L899 garLoopResultBuilder]: For program point L858(lines 858 864) no Hoare annotation was computed. [2023-11-06 22:49:02,697 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-06 22:49:02,697 INFO L895 garLoopResultBuilder]: At program point L858-2(lines 851 867) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) (and (= ~pumpRunning~0 0) .cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1| ~methaneLevelCritical~0)) .cse0 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse3 .cse2))) [2023-11-06 22:49:02,697 INFO L899 garLoopResultBuilder]: For program point L856-1(line 856) no Hoare annotation was computed. [2023-11-06 22:49:02,697 INFO L899 garLoopResultBuilder]: For program point L941(lines 941 945) no Hoare annotation was computed. [2023-11-06 22:49:02,698 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-06 22:49:02,698 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 792 816) no Hoare annotation was computed. [2023-11-06 22:49:02,698 INFO L899 garLoopResultBuilder]: For program point L941-2(lines 941 945) no Hoare annotation was computed. [2023-11-06 22:49:02,698 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:49:02,698 INFO L899 garLoopResultBuilder]: For program point L811-1(lines 792 816) no Hoare annotation was computed. [2023-11-06 22:49:02,698 INFO L902 garLoopResultBuilder]: At program point L881(line 881) the Hoare annotation is: true [2023-11-06 22:49:02,699 INFO L899 garLoopResultBuilder]: For program point L881-1(line 881) no Hoare annotation was computed. [2023-11-06 22:49:02,699 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 876 886) no Hoare annotation was computed. [2023-11-06 22:49:02,699 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 876 886) the Hoare annotation is: true [2023-11-06 22:49:02,699 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 876 886) no Hoare annotation was computed. [2023-11-06 22:49:02,702 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:49:02,705 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:49:02,751 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:49:02 BoogieIcfgContainer [2023-11-06 22:49:02,751 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:49:02,751 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:49:02,752 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:49:02,752 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:49:02,752 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:52" (3/4) ... [2023-11-06 22:49:02,754 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:49:02,759 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:49:02,759 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:49:02,759 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:49:02,759 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:49:02,759 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:49:02,760 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:49:02,760 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:49:02,760 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:49:02,775 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:49:02,775 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:49:02,776 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:49:02,777 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:49:02,777 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:49:02,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && (((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:49:02,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || (methaneLevelCritical < 1)) && ((((((((tmp == 0) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:49:02,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0))))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || (methaneLevelCritical < 1))) [2023-11-06 22:49:02,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:49:02,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && (((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:49:02,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || (methaneLevelCritical < 1)) && ((((((((tmp == 0) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:49:02,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,886 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,886 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:49:02,886 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0))))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || (methaneLevelCritical < 1))) [2023-11-06 22:49:02,886 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:49:02,926 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:49:02,927 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:49:02,927 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:49:02,928 INFO L158 Benchmark]: Toolchain (without parser) took 11372.34ms. Allocated memory was 123.7MB in the beginning and 218.1MB in the end (delta: 94.4MB). Free memory was 79.9MB in the beginning and 186.2MB in the end (delta: -106.3MB). Peak memory consumption was 115.9MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,928 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 123.7MB. Free memory is still 65.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:49:02,929 INFO L158 Benchmark]: CACSL2BoogieTranslator took 562.52ms. Allocated memory is still 123.7MB. Free memory was 79.5MB in the beginning and 60.5MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,929 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.57ms. Allocated memory is still 123.7MB. Free memory was 60.5MB in the beginning and 58.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,930 INFO L158 Benchmark]: Boogie Preprocessor took 31.35ms. Allocated memory is still 123.7MB. Free memory was 58.5MB in the beginning and 56.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,930 INFO L158 Benchmark]: RCFGBuilder took 639.14ms. Allocated memory was 123.7MB in the beginning and 148.9MB in the end (delta: 25.2MB). Free memory was 56.8MB in the beginning and 118.6MB in the end (delta: -61.8MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,931 INFO L158 Benchmark]: TraceAbstraction took 9898.68ms. Allocated memory was 148.9MB in the beginning and 218.1MB in the end (delta: 69.2MB). Free memory was 118.0MB in the beginning and 66.9MB in the end (delta: 51.1MB). Peak memory consumption was 120.8MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,932 INFO L158 Benchmark]: Witness Printer took 175.46ms. Allocated memory is still 218.1MB. Free memory was 66.9MB in the beginning and 186.2MB in the end (delta: -119.3MB). Peak memory consumption was 7.6MB. Max. memory is 16.1GB. [2023-11-06 22:49:02,935 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 123.7MB. Free memory is still 65.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 562.52ms. Allocated memory is still 123.7MB. Free memory was 79.5MB in the beginning and 60.5MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.57ms. Allocated memory is still 123.7MB. Free memory was 60.5MB in the beginning and 58.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.35ms. Allocated memory is still 123.7MB. Free memory was 58.5MB in the beginning and 56.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 639.14ms. Allocated memory was 123.7MB in the beginning and 148.9MB in the end (delta: 25.2MB). Free memory was 56.8MB in the beginning and 118.6MB in the end (delta: -61.8MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. * TraceAbstraction took 9898.68ms. Allocated memory was 148.9MB in the beginning and 218.1MB in the end (delta: 69.2MB). Free memory was 118.0MB in the beginning and 66.9MB in the end (delta: 51.1MB). Peak memory consumption was 120.8MB. Max. memory is 16.1GB. * Witness Printer took 175.46ms. Allocated memory is still 218.1MB. Free memory was 66.9MB in the beginning and 186.2MB in the end (delta: -119.3MB). Peak memory consumption was 7.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [150] - GenericResultAtLocation [Line: 159]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [159] - GenericResultAtLocation [Line: 186]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [186] - GenericResultAtLocation [Line: 288]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [288] - GenericResultAtLocation [Line: 323]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [323] - GenericResultAtLocation [Line: 689]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] - GenericResultAtLocation [Line: 754]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [754] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1263 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1226 mSDsluCounter, 3052 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2078 mSDsCounter, 343 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1320 IncrementalHoareTripleChecker+Invalid, 1663 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 343 mSolverCounterUnsat, 974 mSDtfsCounter, 1320 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 286 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 319 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=538occurred in iteration=9, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 42 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1017 PreInvPairs, 1289 NumberOfFragments, 1119 HoareAnnotationTreeSize, 1017 FomulaSimplifications, 3502 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 42 FomulaSimplificationsInter, 8266 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 589 NumberOfCodeBlocks, 589 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 578 ConstructedInterpolants, 0 QuantifiedInterpolants, 1007 SizeOfPredicates, 3 NumberOfNonLiveVariables, 339 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 88/100 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) && (!((1 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 307]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && (((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0))))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp___0 == 0)) && (\result == 0)) && !((tmp == 0)))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || (methaneLevelCritical < 1)) && ((((((((tmp == 0) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) RESULT: Ultimate proved your program to be correct! [2023-11-06 22:49:03,042 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f7ce9524-d206-49bd-ae2a-a54d50341426/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE