./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:18:08,205 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:18:08,304 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:18:08,310 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:18:08,311 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:18:08,336 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:18:08,337 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:18:08,338 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:18:08,339 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:18:08,339 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:18:08,340 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:18:08,341 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:18:08,342 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:18:08,343 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:18:08,343 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:18:08,344 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:18:08,345 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:18:08,345 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:18:08,346 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:18:08,347 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:18:08,347 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:18:08,348 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:18:08,349 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:18:08,349 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:18:08,350 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:18:08,350 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:18:08,351 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:18:08,351 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:18:08,352 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:18:08,352 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:18:08,353 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:18:08,353 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:18:08,354 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:18:08,354 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:18:08,355 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:18:08,355 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:18:08,356 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:18:08,356 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:18:08,357 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:18:08,357 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 [2023-11-06 22:18:08,644 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:18:08,672 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:18:08,674 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:18:08,676 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:18:08,677 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:18:08,678 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2023-11-06 22:18:11,990 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:18:12,275 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:18:12,276 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2023-11-06 22:18:12,296 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/data/14eeba532/3de9a06962a442bda556c611dfcb56c6/FLAG598afa9a5 [2023-11-06 22:18:12,314 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/data/14eeba532/3de9a06962a442bda556c611dfcb56c6 [2023-11-06 22:18:12,320 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:18:12,323 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:18:12,327 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:18:12,328 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:18:12,333 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:18:12,336 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:12,337 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7afd3124 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12, skipping insertion in model container [2023-11-06 22:18:12,337 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:12,411 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:18:12,628 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2023-11-06 22:18:12,753 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:18:12,766 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:18:12,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-06 22:18:12,785 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2023-11-06 22:18:12,785 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] [2023-11-06 22:18:12,785 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] [2023-11-06 22:18:12,786 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] [2023-11-06 22:18:12,786 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] [2023-11-06 22:18:12,787 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] [2023-11-06 22:18:12,787 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] [2023-11-06 22:18:12,795 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2023-11-06 22:18:12,911 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:18:12,936 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:18:12,937 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12 WrapperNode [2023-11-06 22:18:12,937 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:18:12,938 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:18:12,939 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:18:12,939 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:18:12,947 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:12,970 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,003 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 223 [2023-11-06 22:18:13,004 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:18:13,005 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:18:13,005 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:18:13,005 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:18:13,016 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,016 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,019 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,020 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,026 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,032 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,034 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,036 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,039 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:18:13,040 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:18:13,040 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:18:13,041 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:18:13,042 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (1/1) ... [2023-11-06 22:18:13,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:18:13,068 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:18:13,081 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:18:13,087 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:18:13,126 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:18:13,126 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:18:13,126 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:18:13,126 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:18:13,128 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:18:13,129 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:18:13,130 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:18:13,130 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:18:13,130 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:18:13,130 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:18:13,130 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:18:13,131 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:18:13,131 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:18:13,131 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:18:13,131 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:18:13,132 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:18:13,132 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:18:13,132 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:18:13,133 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:18:13,134 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:18:13,134 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:18:13,134 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:18:13,134 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:18:13,134 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:18:13,221 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:18:13,224 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:18:13,661 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:18:13,670 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:18:13,670 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:18:13,673 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:18:13 BoogieIcfgContainer [2023-11-06 22:18:13,673 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:18:13,676 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:18:13,676 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:18:13,687 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:18:13,687 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:18:12" (1/3) ... [2023-11-06 22:18:13,688 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@34711e95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:18:13, skipping insertion in model container [2023-11-06 22:18:13,688 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:18:12" (2/3) ... [2023-11-06 22:18:13,689 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@34711e95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:18:13, skipping insertion in model container [2023-11-06 22:18:13,691 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:18:13" (3/3) ... [2023-11-06 22:18:13,692 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product64.cil.c [2023-11-06 22:18:13,710 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:18:13,710 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:18:13,765 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:18:13,772 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@37de57a1, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:18:13,773 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:18:13,778 INFO L276 IsEmpty]: Start isEmpty. Operand has 113 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-06 22:18:13,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-06 22:18:13,789 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:13,790 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:13,791 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:13,796 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:13,797 INFO L85 PathProgramCache]: Analyzing trace with hash -1906157068, now seen corresponding path program 1 times [2023-11-06 22:18:13,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:13,809 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664411459] [2023-11-06 22:18:13,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:13,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:13,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:18:14,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,023 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:18:14,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:14,024 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [664411459] [2023-11-06 22:18:14,025 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [664411459] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:14,026 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:14,026 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:18:14,027 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226228294] [2023-11-06 22:18:14,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:14,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:18:14,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:14,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:18:14,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:18:14,068 INFO L87 Difference]: Start difference. First operand has 113 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:14,115 INFO L93 Difference]: Finished difference Result 218 states and 295 transitions. [2023-11-06 22:18:14,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:18:14,117 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-06 22:18:14,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:14,129 INFO L225 Difference]: With dead ends: 218 [2023-11-06 22:18:14,129 INFO L226 Difference]: Without dead ends: 104 [2023-11-06 22:18:14,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:18:14,138 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:14,139 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:18:14,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-06 22:18:14,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 104. [2023-11-06 22:18:14,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 22:18:14,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 135 transitions. [2023-11-06 22:18:14,196 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 135 transitions. Word has length 23 [2023-11-06 22:18:14,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:14,197 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 135 transitions. [2023-11-06 22:18:14,198 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,198 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 135 transitions. [2023-11-06 22:18:14,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:18:14,201 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:14,201 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:14,202 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:18:14,202 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:14,203 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:14,203 INFO L85 PathProgramCache]: Analyzing trace with hash 1844087638, now seen corresponding path program 1 times [2023-11-06 22:18:14,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:14,204 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [910874257] [2023-11-06 22:18:14,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:14,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:14,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:18:14,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:18:14,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:14,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [910874257] [2023-11-06 22:18:14,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [910874257] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:14,324 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:14,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:18:14,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586175897] [2023-11-06 22:18:14,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:14,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:18:14,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:14,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:18:14,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:18:14,328 INFO L87 Difference]: Start difference. First operand 104 states and 135 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:14,354 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2023-11-06 22:18:14,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:18:14,355 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-06 22:18:14,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:14,357 INFO L225 Difference]: With dead ends: 169 [2023-11-06 22:18:14,358 INFO L226 Difference]: Without dead ends: 95 [2023-11-06 22:18:14,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:18:14,361 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 17 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:14,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 222 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:18:14,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2023-11-06 22:18:14,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2023-11-06 22:18:14,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:18:14,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2023-11-06 22:18:14,379 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 24 [2023-11-06 22:18:14,380 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:14,380 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2023-11-06 22:18:14,380 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,380 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2023-11-06 22:18:14,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-06 22:18:14,382 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:14,382 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:14,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:18:14,383 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:14,384 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:14,384 INFO L85 PathProgramCache]: Analyzing trace with hash -1533698931, now seen corresponding path program 1 times [2023-11-06 22:18:14,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:14,384 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [385362434] [2023-11-06 22:18:14,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:14,385 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:14,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:18:14,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,549 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:18:14,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:14,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [385362434] [2023-11-06 22:18:14,550 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [385362434] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:14,550 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:14,551 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:18:14,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1857276657] [2023-11-06 22:18:14,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:14,552 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:18:14,552 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:14,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:18:14,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:18:14,553 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:14,693 INFO L93 Difference]: Finished difference Result 225 states and 294 transitions. [2023-11-06 22:18:14,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:18:14,694 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2023-11-06 22:18:14,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:14,697 INFO L225 Difference]: With dead ends: 225 [2023-11-06 22:18:14,698 INFO L226 Difference]: Without dead ends: 137 [2023-11-06 22:18:14,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:18:14,701 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 186 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:14,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [186 Valid, 395 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:18:14,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2023-11-06 22:18:14,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 134. [2023-11-06 22:18:14,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 134 states, 98 states have (on average 1.336734693877551) internal successors, (131), 111 states have internal predecessors, (131), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2023-11-06 22:18:14,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 174 transitions. [2023-11-06 22:18:14,730 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 174 transitions. Word has length 29 [2023-11-06 22:18:14,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:14,731 INFO L495 AbstractCegarLoop]: Abstraction has 134 states and 174 transitions. [2023-11-06 22:18:14,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:14,731 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 174 transitions. [2023-11-06 22:18:14,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:18:14,734 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:14,734 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:14,735 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:18:14,735 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:14,736 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:14,736 INFO L85 PathProgramCache]: Analyzing trace with hash 521603362, now seen corresponding path program 1 times [2023-11-06 22:18:14,736 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:14,737 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190287097] [2023-11-06 22:18:14,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:14,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:14,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:18:14,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:14,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:18:14,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:15,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190287097] [2023-11-06 22:18:15,002 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190287097] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:15,002 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:15,004 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:18:15,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760407098] [2023-11-06 22:18:15,005 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:15,005 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:18:15,007 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:15,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:18:15,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:18:15,008 INFO L87 Difference]: Start difference. First operand 134 states and 174 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:15,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:15,177 INFO L93 Difference]: Finished difference Result 314 states and 419 transitions. [2023-11-06 22:18:15,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:18:15,179 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 22:18:15,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:15,188 INFO L225 Difference]: With dead ends: 314 [2023-11-06 22:18:15,188 INFO L226 Difference]: Without dead ends: 187 [2023-11-06 22:18:15,191 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:18:15,195 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 72 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:15,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 433 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:18:15,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2023-11-06 22:18:15,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 179. [2023-11-06 22:18:15,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 132 states have (on average 1.2727272727272727) internal successors, (168), 144 states have internal predecessors, (168), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2023-11-06 22:18:15,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 226 transitions. [2023-11-06 22:18:15,242 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 226 transitions. Word has length 32 [2023-11-06 22:18:15,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:15,242 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 226 transitions. [2023-11-06 22:18:15,243 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:18:15,243 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 226 transitions. [2023-11-06 22:18:15,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-06 22:18:15,246 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:15,246 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:15,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:18:15,247 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:15,247 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:15,247 INFO L85 PathProgramCache]: Analyzing trace with hash 1689247176, now seen corresponding path program 1 times [2023-11-06 22:18:15,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:15,248 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101782630] [2023-11-06 22:18:15,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:15,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:15,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:18:15,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:15,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:15,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:15,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:18:15,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:15,574 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:18:15,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:15,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101782630] [2023-11-06 22:18:15,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101782630] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:15,576 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:15,576 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:18:15,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1750667802] [2023-11-06 22:18:15,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:15,581 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:18:15,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:15,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:18:15,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:18:15,584 INFO L87 Difference]: Start difference. First operand 179 states and 226 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:18:15,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:15,990 INFO L93 Difference]: Finished difference Result 538 states and 711 transitions. [2023-11-06 22:18:15,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:18:15,991 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2023-11-06 22:18:15,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:15,997 INFO L225 Difference]: With dead ends: 538 [2023-11-06 22:18:16,019 INFO L226 Difference]: Without dead ends: 366 [2023-11-06 22:18:16,022 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:18:16,028 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 201 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 417 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:16,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 417 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:18:16,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 366 states. [2023-11-06 22:18:16,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 366 to 344. [2023-11-06 22:18:16,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 256 states have (on average 1.25) internal successors, (320), 273 states have internal predecessors, (320), 45 states have call successors, (45), 38 states have call predecessors, (45), 42 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2023-11-06 22:18:16,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 433 transitions. [2023-11-06 22:18:16,131 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 433 transitions. Word has length 60 [2023-11-06 22:18:16,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:16,132 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 433 transitions. [2023-11-06 22:18:16,132 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:18:16,133 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 433 transitions. [2023-11-06 22:18:16,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-06 22:18:16,138 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:16,138 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:16,138 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:18:16,139 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:16,139 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:16,139 INFO L85 PathProgramCache]: Analyzing trace with hash -361736822, now seen corresponding path program 1 times [2023-11-06 22:18:16,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:16,140 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383844056] [2023-11-06 22:18:16,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:16,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:16,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:18:16,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:16,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:16,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:16,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:18:16,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,365 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:18:16,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:16,366 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383844056] [2023-11-06 22:18:16,366 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [383844056] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:16,366 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:16,367 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:18:16,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1208559261] [2023-11-06 22:18:16,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:16,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:18:16,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:16,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:18:16,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:18:16,369 INFO L87 Difference]: Start difference. First operand 344 states and 433 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:18:16,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:16,630 INFO L93 Difference]: Finished difference Result 699 states and 908 transitions. [2023-11-06 22:18:16,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:18:16,631 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2023-11-06 22:18:16,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:16,634 INFO L225 Difference]: With dead ends: 699 [2023-11-06 22:18:16,634 INFO L226 Difference]: Without dead ends: 362 [2023-11-06 22:18:16,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:18:16,637 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 73 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:16,638 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 391 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:18:16,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2023-11-06 22:18:16,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 350. [2023-11-06 22:18:16,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 262 states have (on average 1.2442748091603053) internal successors, (326), 279 states have internal predecessors, (326), 45 states have call successors, (45), 38 states have call predecessors, (45), 42 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2023-11-06 22:18:16,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 439 transitions. [2023-11-06 22:18:16,684 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 439 transitions. Word has length 60 [2023-11-06 22:18:16,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:16,684 INFO L495 AbstractCegarLoop]: Abstraction has 350 states and 439 transitions. [2023-11-06 22:18:16,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:18:16,685 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 439 transitions. [2023-11-06 22:18:16,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-06 22:18:16,688 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:16,688 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:16,688 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:18:16,689 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:16,689 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:16,689 INFO L85 PathProgramCache]: Analyzing trace with hash 255268371, now seen corresponding path program 1 times [2023-11-06 22:18:16,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:16,690 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515972936] [2023-11-06 22:18:16,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:16,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:16,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:18:16,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:16,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:16,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:16,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-06 22:18:16,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:16,834 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:18:16,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:16,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1515972936] [2023-11-06 22:18:16,834 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1515972936] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:16,834 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:16,835 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:18:16,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [540961579] [2023-11-06 22:18:16,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:16,837 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:18:16,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:16,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:18:16,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:18:16,840 INFO L87 Difference]: Start difference. First operand 350 states and 439 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:18:17,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:17,137 INFO L93 Difference]: Finished difference Result 647 states and 825 transitions. [2023-11-06 22:18:17,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:18:17,138 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 63 [2023-11-06 22:18:17,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:17,143 INFO L225 Difference]: With dead ends: 647 [2023-11-06 22:18:17,143 INFO L226 Difference]: Without dead ends: 304 [2023-11-06 22:18:17,145 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:18:17,148 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 119 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 195 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 195 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:17,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [128 Valid, 453 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 195 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:18:17,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2023-11-06 22:18:17,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 295. [2023-11-06 22:18:17,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295 states, 221 states have (on average 1.2217194570135748) internal successors, (270), 235 states have internal predecessors, (270), 38 states have call successors, (38), 32 states have call predecessors, (38), 35 states have return successors, (49), 38 states have call predecessors, (49), 38 states have call successors, (49) [2023-11-06 22:18:17,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295 states to 295 states and 357 transitions. [2023-11-06 22:18:17,189 INFO L78 Accepts]: Start accepts. Automaton has 295 states and 357 transitions. Word has length 63 [2023-11-06 22:18:17,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:17,193 INFO L495 AbstractCegarLoop]: Abstraction has 295 states and 357 transitions. [2023-11-06 22:18:17,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:18:17,194 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 357 transitions. [2023-11-06 22:18:17,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2023-11-06 22:18:17,196 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:17,196 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:17,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:18:17,196 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:17,197 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:17,197 INFO L85 PathProgramCache]: Analyzing trace with hash 1271229164, now seen corresponding path program 1 times [2023-11-06 22:18:17,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:17,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1104862240] [2023-11-06 22:18:17,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:17,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:17,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:18:17,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:18:17,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:17,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:17,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:17,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-06 22:18:17,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:17,436 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:18:17,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:17,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1104862240] [2023-11-06 22:18:17,437 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1104862240] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:17,437 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:18:17,437 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:18:17,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887981365] [2023-11-06 22:18:17,437 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:17,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:18:17,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:17,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:18:17,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:18:17,439 INFO L87 Difference]: Start difference. First operand 295 states and 357 transitions. Second operand has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:18:18,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:18,358 INFO L93 Difference]: Finished difference Result 974 states and 1213 transitions. [2023-11-06 22:18:18,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-06 22:18:18,359 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2023-11-06 22:18:18,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:18,367 INFO L225 Difference]: With dead ends: 974 [2023-11-06 22:18:18,368 INFO L226 Difference]: Without dead ends: 686 [2023-11-06 22:18:18,369 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:18:18,371 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 377 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 452 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 385 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 631 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 452 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:18,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [385 Valid, 321 Invalid, 631 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 452 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:18:18,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2023-11-06 22:18:18,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 591. [2023-11-06 22:18:18,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 434 states have (on average 1.2027649769585254) internal successors, (522), 469 states have internal predecessors, (522), 82 states have call successors, (82), 64 states have call predecessors, (82), 74 states have return successors, (121), 78 states have call predecessors, (121), 82 states have call successors, (121) [2023-11-06 22:18:18,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 725 transitions. [2023-11-06 22:18:18,474 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 725 transitions. Word has length 64 [2023-11-06 22:18:18,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:18,474 INFO L495 AbstractCegarLoop]: Abstraction has 591 states and 725 transitions. [2023-11-06 22:18:18,475 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:18:18,475 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 725 transitions. [2023-11-06 22:18:18,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2023-11-06 22:18:18,478 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:18,479 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:18,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:18:18,479 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:18,480 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:18,480 INFO L85 PathProgramCache]: Analyzing trace with hash 2077759664, now seen corresponding path program 1 times [2023-11-06 22:18:18,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:18,480 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813933606] [2023-11-06 22:18:18,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:18,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:18,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:18:18,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:18:18,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:18:18,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:18,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:18,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:18,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2023-11-06 22:18:18,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:18,967 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:18:18,967 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:18,967 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813933606] [2023-11-06 22:18:18,968 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813933606] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:18:18,968 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [911346413] [2023-11-06 22:18:18,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:18,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:18:18,969 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:18:18,972 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:18:19,003 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:18:19,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:19,090 INFO L262 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:18:19,101 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:18:19,337 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:18:19,337 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:18:19,338 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [911346413] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:19,338 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:18:19,338 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2023-11-06 22:18:19,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617617282] [2023-11-06 22:18:19,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:19,339 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:18:19,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:19,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:18:19,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:18:19,341 INFO L87 Difference]: Start difference. First operand 591 states and 725 transitions. Second operand has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:18:19,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:19,641 INFO L93 Difference]: Finished difference Result 1159 states and 1428 transitions. [2023-11-06 22:18:19,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:18:19,641 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 68 [2023-11-06 22:18:19,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:19,646 INFO L225 Difference]: With dead ends: 1159 [2023-11-06 22:18:19,646 INFO L226 Difference]: Without dead ends: 575 [2023-11-06 22:18:19,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:18:19,650 INFO L413 NwaCegarLoop]: 201 mSDtfsCounter, 79 mSDsluCounter, 839 mSDsCounter, 0 mSdLazyCounter, 212 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 1040 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 212 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:19,650 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 1040 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 212 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:18:19,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2023-11-06 22:18:19,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 575. [2023-11-06 22:18:19,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 575 states, 422 states have (on average 1.1895734597156398) internal successors, (502), 456 states have internal predecessors, (502), 81 states have call successors, (81), 64 states have call predecessors, (81), 71 states have return successors, (107), 75 states have call predecessors, (107), 81 states have call successors, (107) [2023-11-06 22:18:19,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 575 states to 575 states and 690 transitions. [2023-11-06 22:18:19,741 INFO L78 Accepts]: Start accepts. Automaton has 575 states and 690 transitions. Word has length 68 [2023-11-06 22:18:19,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:19,743 INFO L495 AbstractCegarLoop]: Abstraction has 575 states and 690 transitions. [2023-11-06 22:18:19,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:18:19,744 INFO L276 IsEmpty]: Start isEmpty. Operand 575 states and 690 transitions. [2023-11-06 22:18:19,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2023-11-06 22:18:19,754 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:18:19,755 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:19,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:18:19,964 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:18:19,964 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:18:19,964 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:18:19,965 INFO L85 PathProgramCache]: Analyzing trace with hash 963454430, now seen corresponding path program 1 times [2023-11-06 22:18:19,965 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:18:19,965 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124606999] [2023-11-06 22:18:19,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:19,965 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:18:19,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:18:20,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:18:20,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:18:20,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:20,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:18:20,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:20,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:18:20,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-06 22:18:20,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2023-11-06 22:18:20,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:18:20,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2023-11-06 22:18:20,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:18:20,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:18:20,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2023-11-06 22:18:20,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,422 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-11-06 22:18:20,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:18:20,422 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124606999] [2023-11-06 22:18:20,423 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124606999] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:18:20,423 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1188239334] [2023-11-06 22:18:20,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:18:20,423 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:18:20,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:18:20,425 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:18:20,452 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:18:20,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:18:20,562 INFO L262 TraceCheckSpWp]: Trace formula consists of 385 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:18:20,570 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:18:20,757 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:18:20,758 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:18:20,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1188239334] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:18:20,758 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:18:20,759 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2023-11-06 22:18:20,759 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1749312440] [2023-11-06 22:18:20,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:18:20,760 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:18:20,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:18:20,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:18:20,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:18:20,761 INFO L87 Difference]: Start difference. First operand 575 states and 690 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:18:20,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:18:20,978 INFO L93 Difference]: Finished difference Result 930 states and 1126 transitions. [2023-11-06 22:18:20,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:18:20,979 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2023-11-06 22:18:20,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:18:20,981 INFO L225 Difference]: With dead ends: 930 [2023-11-06 22:18:20,981 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:18:20,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=63, Invalid=399, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:18:20,985 INFO L413 NwaCegarLoop]: 199 mSDtfsCounter, 70 mSDsluCounter, 1017 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 1216 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:18:20,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 1216 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:18:20,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:18:20,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:18:20,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:18:20,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:18:20,988 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2023-11-06 22:18:20,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:18:20,988 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:18:20,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:18:20,988 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:18:20,989 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:18:20,992 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:18:21,002 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:18:21,200 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:18:21,202 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:18:24,977 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 737 744) no Hoare annotation was computed. [2023-11-06 22:18:24,978 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 737 744) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:18:24,978 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 737 744) no Hoare annotation was computed. [2023-11-06 22:18:24,978 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 627 633) no Hoare annotation was computed. [2023-11-06 22:18:24,979 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 627 633) the Hoare annotation is: true [2023-11-06 22:18:24,979 INFO L895 garLoopResultBuilder]: At program point L671(line 671) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:24,979 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 677) no Hoare annotation was computed. [2023-11-06 22:18:24,979 INFO L899 garLoopResultBuilder]: For program point L665(lines 665 682) no Hoare annotation was computed. [2023-11-06 22:18:24,979 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 957 965) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:24,980 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 661 685) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:18:24,980 INFO L895 garLoopResultBuilder]: At program point L680(line 680) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (and .cse1 .cse0)))) [2023-11-06 22:18:24,980 INFO L899 garLoopResultBuilder]: For program point L680-1(lines 661 685) no Hoare annotation was computed. [2023-11-06 22:18:24,980 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 820 838) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:24,980 INFO L899 garLoopResultBuilder]: For program point L829(lines 829 833) no Hoare annotation was computed. [2023-11-06 22:18:24,980 INFO L899 garLoopResultBuilder]: For program point L829-2(lines 829 833) no Hoare annotation was computed. [2023-11-06 22:18:24,981 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 661 685) no Hoare annotation was computed. [2023-11-06 22:18:24,981 INFO L895 garLoopResultBuilder]: At program point L675(line 675) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:24,981 INFO L899 garLoopResultBuilder]: For program point L894-1(lines 890 901) no Hoare annotation was computed. [2023-11-06 22:18:24,981 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 890 901) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (< |old(~methaneLevelCritical~0)| 1)))) [2023-11-06 22:18:24,981 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 890 901) no Hoare annotation was computed. [2023-11-06 22:18:24,981 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 603 626) no Hoare annotation was computed. [2023-11-06 22:18:24,982 INFO L899 garLoopResultBuilder]: For program point L870(lines 870 874) no Hoare annotation was computed. [2023-11-06 22:18:24,982 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 614 620) no Hoare annotation was computed. [2023-11-06 22:18:24,982 INFO L895 garLoopResultBuilder]: At program point L870-2(lines 866 877) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse4 .cse2))) [2023-11-06 22:18:24,982 INFO L895 garLoopResultBuilder]: At program point L701(line 701) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse0 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:24,993 INFO L895 garLoopResultBuilder]: At program point L697(line 697) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2) (or .cse3 .cse4) (or .cse3 .cse2) (or .cse1 .cse4 .cse0))) [2023-11-06 22:18:24,993 INFO L895 garLoopResultBuilder]: At program point L693(line 693) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse4 .cse2))) [2023-11-06 22:18:24,993 INFO L899 garLoopResultBuilder]: For program point L693-1(line 693) no Hoare annotation was computed. [2023-11-06 22:18:24,993 INFO L899 garLoopResultBuilder]: For program point L111(lines 111 117) no Hoare annotation was computed. [2023-11-06 22:18:24,994 INFO L899 garLoopResultBuilder]: For program point L107(lines 107 120) no Hoare annotation was computed. [2023-11-06 22:18:24,994 INFO L895 garLoopResultBuilder]: At program point L107-1(lines 99 123) the Hoare annotation is: (let ((.cse4 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse4 .cse2 .cse3) (or .cse0 (and .cse1 .cse5) .cse6) (or (and .cse4 .cse5) .cse0 .cse2) (or .cse1 .cse3 .cse6) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 22:18:24,994 INFO L895 garLoopResultBuilder]: At program point L706(line 706) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= ~pumpRunning~0 0) .cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not .cse6)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse4 (not .cse2))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse2 .cse5) (or .cse3 .cse5 .cse4)))) [2023-11-06 22:18:24,994 INFO L895 garLoopResultBuilder]: At program point L706-1(lines 687 711) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse2 (not .cse5))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse6) (or .cse0 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse0 .cse6 .cse2)))) [2023-11-06 22:18:24,996 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 606 625) no Hoare annotation was computed. [2023-11-06 22:18:24,997 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-06 22:18:24,997 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse0 .cse3) (or .cse1 .cse2))) [2023-11-06 22:18:24,997 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 603 626) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse5) (or .cse3 .cse4 .cse0)))) [2023-11-06 22:18:24,998 INFO L899 garLoopResultBuilder]: For program point L695(lines 695 703) no Hoare annotation was computed. [2023-11-06 22:18:24,998 INFO L899 garLoopResultBuilder]: For program point L691(lines 691 708) no Hoare annotation was computed. [2023-11-06 22:18:24,998 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 603 626) no Hoare annotation was computed. [2023-11-06 22:18:24,998 INFO L895 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse5 .cse6)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse0 .cse1 .cse4) (or .cse5 .cse3 .cse4) (or .cse0 .cse5 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse0 .cse2 .cse6)))) [2023-11-06 22:18:24,998 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 756 764) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse4) (or (and .cse2 .cse3) .cse5 .cse4) (or .cse1 .cse5))) [2023-11-06 22:18:24,999 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-06 22:18:24,999 INFO L899 garLoopResultBuilder]: For program point L105-1(line 105) no Hoare annotation was computed. [2023-11-06 22:18:24,999 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 493 522) no Hoare annotation was computed. [2023-11-06 22:18:24,999 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 511) no Hoare annotation was computed. [2023-11-06 22:18:24,999 INFO L902 garLoopResultBuilder]: At program point L507-1(lines 507 511) the Hoare annotation is: true [2023-11-06 22:18:25,000 INFO L899 garLoopResultBuilder]: For program point L504(line 504) no Hoare annotation was computed. [2023-11-06 22:18:25,000 INFO L902 garLoopResultBuilder]: At program point L503-2(lines 503 517) the Hoare annotation is: true [2023-11-06 22:18:25,000 INFO L902 garLoopResultBuilder]: At program point L499(line 499) the Hoare annotation is: true [2023-11-06 22:18:25,000 INFO L899 garLoopResultBuilder]: For program point L499-1(line 499) no Hoare annotation was computed. [2023-11-06 22:18:25,000 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 493 522) the Hoare annotation is: true [2023-11-06 22:18:25,000 INFO L902 garLoopResultBuilder]: At program point L518(lines 493 522) the Hoare annotation is: true [2023-11-06 22:18:25,001 INFO L899 garLoopResultBuilder]: For program point L514(line 514) no Hoare annotation was computed. [2023-11-06 22:18:25,001 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 902 910) the Hoare annotation is: true [2023-11-06 22:18:25,001 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 902 910) no Hoare annotation was computed. [2023-11-06 22:18:25,001 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 902 910) no Hoare annotation was computed. [2023-11-06 22:18:25,001 INFO L895 garLoopResultBuilder]: At program point L989(line 989) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:18:25,002 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 854 861) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:18:25,002 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 558 567) the Hoare annotation is: true [2023-11-06 22:18:25,002 INFO L895 garLoopResultBuilder]: At program point L845(line 845) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:18:25,002 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:18:25,003 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 568 590) the Hoare annotation is: true [2023-11-06 22:18:25,003 INFO L895 garLoopResultBuilder]: At program point L1027(lines 976 1028) the Hoare annotation is: false [2023-11-06 22:18:25,003 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:18:25,003 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:18:25,003 INFO L899 garLoopResultBuilder]: For program point L1015(lines 1015 1021) no Hoare annotation was computed. [2023-11-06 22:18:25,004 INFO L895 garLoopResultBuilder]: At program point L1015-2(lines 1007 1022) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse5 .cse2 .cse3 .cse4 .cse6))) [2023-11-06 22:18:25,004 INFO L899 garLoopResultBuilder]: For program point L978(lines 977 1026) no Hoare annotation was computed. [2023-11-06 22:18:25,004 INFO L899 garLoopResultBuilder]: For program point L1007(lines 1007 1022) no Hoare annotation was computed. [2023-11-06 22:18:25,004 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 550 556) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:18:25,005 INFO L895 garLoopResultBuilder]: At program point L999(line 999) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:18:25,005 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 585) no Hoare annotation was computed. [2023-11-06 22:18:25,005 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:18:25,005 INFO L895 garLoopResultBuilder]: At program point L1024(lines 977 1026) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:18:25,005 INFO L899 garLoopResultBuilder]: For program point L578-2(lines 578 585) no Hoare annotation was computed. [2023-11-06 22:18:25,005 INFO L899 garLoopResultBuilder]: For program point L987(lines 987 993) no Hoare annotation was computed. [2023-11-06 22:18:25,006 INFO L899 garLoopResultBuilder]: For program point L987-1(lines 987 993) no Hoare annotation was computed. [2023-11-06 22:18:25,006 INFO L899 garLoopResultBuilder]: For program point L979(lines 979 983) no Hoare annotation was computed. [2023-11-06 22:18:25,006 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 849) no Hoare annotation was computed. [2023-11-06 22:18:25,006 INFO L899 garLoopResultBuilder]: For program point L843-1(lines 843 849) no Hoare annotation was computed. [2023-11-06 22:18:25,006 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:18:25,007 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:18:25,007 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 839 853) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4))) [2023-11-06 22:18:25,007 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:18:25,007 INFO L902 garLoopResultBuilder]: At program point L1030(lines 967 1034) the Hoare annotation is: true [2023-11-06 22:18:25,007 INFO L899 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2023-11-06 22:18:25,008 INFO L899 garLoopResultBuilder]: For program point L997-1(lines 997 1003) no Hoare annotation was computed. [2023-11-06 22:18:25,008 INFO L899 garLoopResultBuilder]: For program point L727(lines 727 733) no Hoare annotation was computed. [2023-11-06 22:18:25,008 INFO L895 garLoopResultBuilder]: At program point L725(line 725) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6 (not .cse2))) (.cse0 (not (= ~waterLevel~0 1))) (.cse3 (not .cse6)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse2 .cse5) (or .cse1 .cse4 .cse2) (or .cse0 .cse3 .cse2 .cse5)))) [2023-11-06 22:18:25,008 INFO L895 garLoopResultBuilder]: At program point L727-2(lines 720 736) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse1 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:18:25,009 INFO L899 garLoopResultBuilder]: For program point L725-1(line 725) no Hoare annotation was computed. [2023-11-06 22:18:25,009 INFO L899 garLoopResultBuilder]: For program point L810(lines 810 814) no Hoare annotation was computed. [2023-11-06 22:18:25,009 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 635 659) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:18:25,009 INFO L895 garLoopResultBuilder]: At program point L649(line 649) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) .cse7 (not .cse2))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~waterLevel~0 1))) (.cse0 (not .cse7)) (.cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse5 .cse6 .cse4 .cse2) (or .cse5 .cse0 .cse6 .cse2 .cse3)))) [2023-11-06 22:18:25,009 INFO L899 garLoopResultBuilder]: For program point L810-2(lines 810 814) no Hoare annotation was computed. [2023-11-06 22:18:25,010 INFO L899 garLoopResultBuilder]: For program point L643(lines 643 651) no Hoare annotation was computed. [2023-11-06 22:18:25,010 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 943 956) the Hoare annotation is: (let ((.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse5)) (.cse7 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 (and .cse1 .cse5)) (or .cse6 .cse7 .cse4 .cse2) (or .cse6 .cse0 .cse7 .cse2 .cse3)))) [2023-11-06 22:18:25,010 INFO L899 garLoopResultBuilder]: For program point L639(lines 639 656) no Hoare annotation was computed. [2023-11-06 22:18:25,010 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 801 819) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)))) (.cse4 (not .cse7)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse7 (not .cse3)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3 .cse5) (or .cse4 .cse6 .cse3 .cse5) (or .cse1 .cse6 .cse3)))) [2023-11-06 22:18:25,011 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 635 659) no Hoare annotation was computed. [2023-11-06 22:18:25,011 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2023-11-06 22:18:25,011 INFO L895 garLoopResultBuilder]: At program point L654(line 654) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:18:25,011 INFO L899 garLoopResultBuilder]: For program point L654-1(lines 635 659) no Hoare annotation was computed. [2023-11-06 22:18:25,011 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 712 719) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:18:25,012 INFO L899 garLoopResultBuilder]: For program point L882-1(lines 878 889) no Hoare annotation was computed. [2023-11-06 22:18:25,012 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 878 889) no Hoare annotation was computed. [2023-11-06 22:18:25,012 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 878 889) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1))) [2023-11-06 22:18:25,012 INFO L902 garLoopResultBuilder]: At program point L750(line 750) the Hoare annotation is: true [2023-11-06 22:18:25,012 INFO L899 garLoopResultBuilder]: For program point L750-1(line 750) no Hoare annotation was computed. [2023-11-06 22:18:25,013 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 745 755) no Hoare annotation was computed. [2023-11-06 22:18:25,013 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 745 755) the Hoare annotation is: true [2023-11-06 22:18:25,013 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 745 755) no Hoare annotation was computed. [2023-11-06 22:18:25,016 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:18:25,018 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:18:25,053 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:18:25 BoogieIcfgContainer [2023-11-06 22:18:25,053 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:18:25,054 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:18:25,054 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:18:25,054 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:18:25,055 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:18:13" (3/4) ... [2023-11-06 22:18:25,057 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:18:25,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:18:25,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:18:25,062 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:18:25,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:18:25,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:18:25,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:18:25,063 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:18:25,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:18:25,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:18:25,064 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:18:25,074 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2023-11-06 22:18:25,075 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:18:25,076 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:18:25,077 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:18:25,077 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:18:25,108 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:18:25,109 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:18:25,109 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:18:25,110 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,111 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:18:25,112 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((tmp == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((tmp == 0) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0)))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:18:25,112 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:18:25,113 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) [2023-11-06 22:18:25,113 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:18:25,114 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp) && (pumpRunning == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,114 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,114 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:18:25,115 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((methaneLevelCritical == 0)) || (0 == systemActive)) || ((pumpRunning == 0) && (\old(pumpRunning) == 0)))) && (((!((waterLevel == 1)) || !((\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,115 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:18:25,115 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:18:25,116 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((methaneLevelCritical == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:18:25,157 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:18:25,158 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:18:25,158 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:18:25,158 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,159 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:18:25,159 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((tmp == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((tmp == 0) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0)))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:18:25,160 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:18:25,160 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) [2023-11-06 22:18:25,160 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:18:25,161 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp) && (pumpRunning == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,161 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,161 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:18:25,161 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((methaneLevelCritical == 0)) || (0 == systemActive)) || ((pumpRunning == 0) && (\old(pumpRunning) == 0)))) && (((!((waterLevel == 1)) || !((\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:18:25,162 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:18:25,162 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:18:25,162 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((methaneLevelCritical == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:18:25,178 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:18:25,179 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:18:25,179 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:18:25,180 INFO L158 Benchmark]: Toolchain (without parser) took 12856.53ms. Allocated memory was 153.1MB in the beginning and 226.5MB in the end (delta: 73.4MB). Free memory was 106.4MB in the beginning and 171.7MB in the end (delta: -65.4MB). Peak memory consumption was 10.9MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,180 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 109.1MB. Free memory is still 61.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:18:25,181 INFO L158 Benchmark]: CACSL2BoogieTranslator took 610.26ms. Allocated memory is still 153.1MB. Free memory was 106.4MB in the beginning and 86.6MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,181 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.47ms. Allocated memory is still 153.1MB. Free memory was 86.6MB in the beginning and 84.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,182 INFO L158 Benchmark]: Boogie Preprocessor took 34.88ms. Allocated memory is still 153.1MB. Free memory was 84.5MB in the beginning and 83.0MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:18:25,182 INFO L158 Benchmark]: RCFGBuilder took 632.91ms. Allocated memory is still 153.1MB. Free memory was 82.4MB in the beginning and 119.3MB in the end (delta: -36.9MB). Peak memory consumption was 18.2MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,183 INFO L158 Benchmark]: TraceAbstraction took 11377.02ms. Allocated memory was 153.1MB in the beginning and 226.5MB in the end (delta: 73.4MB). Free memory was 118.4MB in the beginning and 180.1MB in the end (delta: -61.7MB). Peak memory consumption was 130.4MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,183 INFO L158 Benchmark]: Witness Printer took 125.62ms. Allocated memory is still 226.5MB. Free memory was 179.1MB in the beginning and 171.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:18:25,185 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 109.1MB. Free memory is still 61.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 610.26ms. Allocated memory is still 153.1MB. Free memory was 106.4MB in the beginning and 86.6MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.47ms. Allocated memory is still 153.1MB. Free memory was 86.6MB in the beginning and 84.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.88ms. Allocated memory is still 153.1MB. Free memory was 84.5MB in the beginning and 83.0MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 632.91ms. Allocated memory is still 153.1MB. Free memory was 82.4MB in the beginning and 119.3MB in the end (delta: -36.9MB). Peak memory consumption was 18.2MB. Max. memory is 16.1GB. * TraceAbstraction took 11377.02ms. Allocated memory was 153.1MB in the beginning and 226.5MB in the end (delta: 73.4MB). Free memory was 118.4MB in the beginning and 180.1MB in the end (delta: -61.7MB). Peak memory consumption was 130.4MB. Max. memory is 16.1GB. * Witness Printer took 125.62ms. Allocated memory is still 226.5MB. Free memory was 179.1MB in the beginning and 171.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] - GenericResultAtLocation [Line: 490]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] - GenericResultAtLocation [Line: 591]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] - GenericResultAtLocation [Line: 862]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] - GenericResultAtLocation [Line: 966]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 113 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.3s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1233 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1194 mSDsluCounter, 5032 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3754 mSDsCounter, 320 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1393 IncrementalHoareTripleChecker+Invalid, 1713 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 320 mSolverCounterUnsat, 1278 mSDtfsCounter, 1393 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 388 GetRequests, 291 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 218 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=591occurred in iteration=8, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 149 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 1500 PreInvPairs, 1645 NumberOfFragments, 1735 HoareAnnotationTreeSize, 1500 FomulaSimplifications, 455 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 52 FomulaSimplificationsInter, 6019 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 737 NumberOfCodeBlocks, 737 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 725 ConstructedInterpolants, 0 QuantifiedInterpolants, 1318 SizeOfPredicates, 6 NumberOfNonLiveVariables, 638 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 111/116 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: (((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp) && (pumpRunning == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 687]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 712]: Loop Invariant Derived loop invariant: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 854]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((tmp == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((tmp == 0) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0)))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 756]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((methaneLevelCritical == 0)) || (0 == systemActive)) || ((pumpRunning == 0) && (\old(pumpRunning) == 0)))) && (((!((waterLevel == 1)) || !((\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((((!((waterLevel == 1)) || !((methaneLevelCritical == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) && ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((((tmp___0 == 0) && !((\result == 0))) && (\result == 0)) && !((tmp == 0)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (0 == systemActive))) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:18:25,240 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_23771597-bd1a-48fc-97a0-0d8a150716a3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE