./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:00:56,666 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:00:56,731 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:00:56,737 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:00:56,737 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:00:56,771 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:00:56,772 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:00:56,773 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:00:56,774 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:00:56,775 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:00:56,776 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:00:56,778 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:00:56,778 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:00:56,781 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:00:56,781 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:00:56,782 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:00:56,783 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:00:56,786 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:00:56,787 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:00:56,787 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:00:56,788 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:00:56,788 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:00:56,789 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:00:56,789 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:00:56,789 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:00:56,790 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:00:56,791 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:00:56,791 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:00:56,792 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:00:56,792 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:00:56,793 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:00:56,794 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:00:56,794 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:00:56,795 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:00:56,795 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:00:56,795 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:00:56,796 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:00:56,796 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:00:56,796 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:00:56,796 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2023-11-06 22:00:57,117 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:00:57,143 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:00:57,148 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:00:57,150 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:00:57,150 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:00:57,152 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2023-11-06 22:01:00,362 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:01:00,625 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:01:00,626 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2023-11-06 22:01:00,641 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/data/778bb4c8c/f48f6985c59e47d8af945d39c0601200/FLAG641dc8d14 [2023-11-06 22:01:00,656 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/data/778bb4c8c/f48f6985c59e47d8af945d39c0601200 [2023-11-06 22:01:00,659 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:01:00,661 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:01:00,662 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:01:00,663 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:01:00,674 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:01:00,674 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:01:00" (1/1) ... [2023-11-06 22:01:00,675 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@32e9fe5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:00, skipping insertion in model container [2023-11-06 22:01:00,676 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:01:00" (1/1) ... [2023-11-06 22:01:00,727 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:01:00,919 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2023-11-06 22:01:01,023 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:01:01,035 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:01:01,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 22:01:01,047 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] [2023-11-06 22:01:01,047 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [254] [2023-11-06 22:01:01,047 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [295] [2023-11-06 22:01:01,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] [2023-11-06 22:01:01,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [372] [2023-11-06 22:01:01,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [567] [2023-11-06 22:01:01,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [602] [2023-11-06 22:01:01,064 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2023-11-06 22:01:01,111 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:01:01,132 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:01:01,132 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01 WrapperNode [2023-11-06 22:01:01,132 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:01:01,134 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:01:01,134 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:01:01,134 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:01:01,140 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,155 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,184 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 197 [2023-11-06 22:01:01,185 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:01:01,185 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:01:01,186 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:01:01,186 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:01:01,196 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,196 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,198 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,199 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,206 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,212 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,214 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,215 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,219 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:01:01,220 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:01:01,220 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:01:01,220 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:01:01,221 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (1/1) ... [2023-11-06 22:01:01,229 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:01:01,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:01,267 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:01:01,295 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:01:01,310 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:01:01,310 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:01:01,310 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:01:01,311 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:01:01,311 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:01:01,311 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:01:01,311 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:01:01,311 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:01:01,312 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:01:01,312 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:01:01,312 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:01:01,312 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:01:01,312 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:01:01,313 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:01:01,313 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:01:01,313 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:01:01,314 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:01:01,314 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:01:01,314 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:01:01,315 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:01:01,388 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:01:01,391 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:01:01,754 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:01:01,762 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:01:01,763 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:01:01,765 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:01:01 BoogieIcfgContainer [2023-11-06 22:01:01,765 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:01:01,768 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:01:01,768 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:01:01,772 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:01:01,772 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:01:00" (1/3) ... [2023-11-06 22:01:01,773 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@264b6528 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:01:01, skipping insertion in model container [2023-11-06 22:01:01,773 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:01:01" (2/3) ... [2023-11-06 22:01:01,773 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@264b6528 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:01:01, skipping insertion in model container [2023-11-06 22:01:01,773 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:01:01" (3/3) ... [2023-11-06 22:01:01,775 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2023-11-06 22:01:01,795 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:01:01,795 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:01:01,846 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:01:01,852 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@21474199, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:01:01,853 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:01:01,857 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:01:01,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:01:01,866 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:01,866 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:01,867 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:01,871 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:01,871 INFO L85 PathProgramCache]: Analyzing trace with hash 238573202, now seen corresponding path program 1 times [2023-11-06 22:01:01,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:01,879 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143756530] [2023-11-06 22:01:01,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:01,879 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:01,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:01:02,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:02,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:02,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1143756530] [2023-11-06 22:01:02,067 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1143756530] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:02,067 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:02,067 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:01:02,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923648782] [2023-11-06 22:01:02,070 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:02,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:01:02,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:02,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:01:02,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:01:02,114 INFO L87 Difference]: Start difference. First operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:02,150 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2023-11-06 22:01:02,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:01:02,152 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:01:02,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:02,163 INFO L225 Difference]: With dead ends: 179 [2023-11-06 22:01:02,163 INFO L226 Difference]: Without dead ends: 85 [2023-11-06 22:01:02,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:01:02,171 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:02,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:01:02,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2023-11-06 22:01:02,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2023-11-06 22:01:02,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:01:02,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2023-11-06 22:01:02,220 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2023-11-06 22:01:02,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:02,221 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2023-11-06 22:01:02,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,221 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2023-11-06 22:01:02,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:01:02,224 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:02,225 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:02,225 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:01:02,225 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:02,226 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:02,226 INFO L85 PathProgramCache]: Analyzing trace with hash -1313382680, now seen corresponding path program 1 times [2023-11-06 22:01:02,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:02,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852491943] [2023-11-06 22:01:02,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:02,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:02,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:01:02,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:02,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:02,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852491943] [2023-11-06 22:01:02,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852491943] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:02,383 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:02,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:01:02,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559974345] [2023-11-06 22:01:02,383 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:02,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:01:02,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:02,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:01:02,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:01:02,392 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:02,427 INFO L93 Difference]: Finished difference Result 131 states and 169 transitions. [2023-11-06 22:01:02,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:01:02,428 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:01:02,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:02,435 INFO L225 Difference]: With dead ends: 131 [2023-11-06 22:01:02,437 INFO L226 Difference]: Without dead ends: 76 [2023-11-06 22:01:02,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:01:02,440 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 16 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:02,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:01:02,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-06 22:01:02,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-06 22:01:02,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:01:02,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2023-11-06 22:01:02,458 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2023-11-06 22:01:02,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:02,458 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2023-11-06 22:01:02,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,459 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2023-11-06 22:01:02,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:01:02,460 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:02,461 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:02,461 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:01:02,461 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:02,462 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:02,462 INFO L85 PathProgramCache]: Analyzing trace with hash 418656316, now seen corresponding path program 1 times [2023-11-06 22:01:02,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:02,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1502910456] [2023-11-06 22:01:02,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:02,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:02,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:02,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:02,591 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:02,592 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1502910456] [2023-11-06 22:01:02,592 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1502910456] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:02,592 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:02,592 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:01:02,593 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296039675] [2023-11-06 22:01:02,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:02,593 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:01:02,594 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:02,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:01:02,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:01:02,595 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:02,663 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2023-11-06 22:01:02,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:01:02,665 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 22:01:02,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:02,667 INFO L225 Difference]: With dead ends: 211 [2023-11-06 22:01:02,668 INFO L226 Difference]: Without dead ends: 143 [2023-11-06 22:01:02,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:01:02,687 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 77 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:02,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 200 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:01:02,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2023-11-06 22:01:02,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 140. [2023-11-06 22:01:02,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2023-11-06 22:01:02,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 184 transitions. [2023-11-06 22:01:02,719 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 184 transitions. Word has length 30 [2023-11-06 22:01:02,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:02,720 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 184 transitions. [2023-11-06 22:01:02,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:02,720 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 184 transitions. [2023-11-06 22:01:02,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:01:02,722 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:02,723 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:02,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:01:02,723 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:02,724 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:02,724 INFO L85 PathProgramCache]: Analyzing trace with hash -1768755130, now seen corresponding path program 1 times [2023-11-06 22:01:02,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:02,724 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2098723585] [2023-11-06 22:01:02,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:02,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:02,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:01:02,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:02,942 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:02,942 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2098723585] [2023-11-06 22:01:02,943 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2098723585] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:02,943 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:02,943 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:01:02,943 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [170980403] [2023-11-06 22:01:02,943 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:02,944 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:01:02,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:02,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:01:02,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:01:02,945 INFO L87 Difference]: Start difference. First operand 140 states and 184 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:03,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:03,081 INFO L93 Difference]: Finished difference Result 362 states and 487 transitions. [2023-11-06 22:01:03,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:01:03,083 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:01:03,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:03,086 INFO L225 Difference]: With dead ends: 362 [2023-11-06 22:01:03,086 INFO L226 Difference]: Without dead ends: 230 [2023-11-06 22:01:03,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:03,089 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 53 mSDsluCounter, 256 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:03,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 354 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:01:03,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2023-11-06 22:01:03,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 221. [2023-11-06 22:01:03,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 164 states have (on average 1.3170731707317074) internal successors, (216), 179 states have internal predecessors, (216), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2023-11-06 22:01:03,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 284 transitions. [2023-11-06 22:01:03,168 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 284 transitions. Word has length 34 [2023-11-06 22:01:03,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:03,169 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 284 transitions. [2023-11-06 22:01:03,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:01:03,169 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 284 transitions. [2023-11-06 22:01:03,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-06 22:01:03,172 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:03,172 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:03,172 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:01:03,172 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:03,173 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:03,173 INFO L85 PathProgramCache]: Analyzing trace with hash -869235015, now seen corresponding path program 1 times [2023-11-06 22:01:03,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:03,173 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2007821336] [2023-11-06 22:01:03,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:03,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:03,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:03,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:01:03,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,300 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:03,300 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:03,301 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2007821336] [2023-11-06 22:01:03,301 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2007821336] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:03,301 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:03,301 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:01:03,302 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [425344067] [2023-11-06 22:01:03,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:03,302 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:01:03,302 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:03,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:01:03,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:01:03,304 INFO L87 Difference]: Start difference. First operand 221 states and 284 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:03,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:03,500 INFO L93 Difference]: Finished difference Result 494 states and 645 transitions. [2023-11-06 22:01:03,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:01:03,501 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2023-11-06 22:01:03,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:03,505 INFO L225 Difference]: With dead ends: 494 [2023-11-06 22:01:03,505 INFO L226 Difference]: Without dead ends: 281 [2023-11-06 22:01:03,507 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:01:03,508 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 59 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:03,509 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 349 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:01:03,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 281 states. [2023-11-06 22:01:03,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 281 to 273. [2023-11-06 22:01:03,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 206 states have (on average 1.2912621359223302) internal successors, (266), 221 states have internal predecessors, (266), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-06 22:01:03,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 348 transitions. [2023-11-06 22:01:03,552 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 348 transitions. Word has length 44 [2023-11-06 22:01:03,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:03,552 INFO L495 AbstractCegarLoop]: Abstraction has 273 states and 348 transitions. [2023-11-06 22:01:03,553 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:03,553 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 348 transitions. [2023-11-06 22:01:03,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-06 22:01:03,556 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:03,556 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:03,556 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:01:03,557 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:03,557 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:03,557 INFO L85 PathProgramCache]: Analyzing trace with hash 1736788539, now seen corresponding path program 1 times [2023-11-06 22:01:03,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:03,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361116186] [2023-11-06 22:01:03,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:03,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:03,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:03,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:01:03,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:03,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:03,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361116186] [2023-11-06 22:01:03,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361116186] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:03,685 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:03,685 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:01:03,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045447844] [2023-11-06 22:01:03,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:03,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:01:03,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:03,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:01:03,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:01:03,688 INFO L87 Difference]: Start difference. First operand 273 states and 348 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:03,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:03,848 INFO L93 Difference]: Finished difference Result 556 states and 727 transitions. [2023-11-06 22:01:03,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:01:03,849 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2023-11-06 22:01:03,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:03,852 INFO L225 Difference]: With dead ends: 556 [2023-11-06 22:01:03,852 INFO L226 Difference]: Without dead ends: 291 [2023-11-06 22:01:03,854 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:03,855 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 60 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:03,856 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 276 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:01:03,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2023-11-06 22:01:03,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 277. [2023-11-06 22:01:03,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 277 states, 210 states have (on average 1.2857142857142858) internal successors, (270), 225 states have internal predecessors, (270), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-06 22:01:03,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 277 states to 277 states and 352 transitions. [2023-11-06 22:01:03,897 INFO L78 Accepts]: Start accepts. Automaton has 277 states and 352 transitions. Word has length 44 [2023-11-06 22:01:03,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:03,898 INFO L495 AbstractCegarLoop]: Abstraction has 277 states and 352 transitions. [2023-11-06 22:01:03,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:03,898 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 352 transitions. [2023-11-06 22:01:03,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-06 22:01:03,901 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:03,901 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:03,901 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:01:03,902 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:03,902 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:03,902 INFO L85 PathProgramCache]: Analyzing trace with hash -2135476931, now seen corresponding path program 1 times [2023-11-06 22:01:03,902 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:03,903 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112384138] [2023-11-06 22:01:03,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:03,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:03,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:04,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:01:04,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,032 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:04,032 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:04,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112384138] [2023-11-06 22:01:04,033 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112384138] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:04,033 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:04,033 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:01:04,033 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [895458522] [2023-11-06 22:01:04,034 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:04,034 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:01:04,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:04,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:01:04,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:01:04,036 INFO L87 Difference]: Start difference. First operand 277 states and 352 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:04,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:04,299 INFO L93 Difference]: Finished difference Result 794 states and 1047 transitions. [2023-11-06 22:01:04,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:01:04,301 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2023-11-06 22:01:04,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:04,308 INFO L225 Difference]: With dead ends: 794 [2023-11-06 22:01:04,308 INFO L226 Difference]: Without dead ends: 525 [2023-11-06 22:01:04,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:04,314 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 211 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:04,315 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 293 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:01:04,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 525 states. [2023-11-06 22:01:04,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 525 to 518. [2023-11-06 22:01:04,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 518 states, 391 states have (on average 1.2531969309462916) internal successors, (490), 415 states have internal predecessors, (490), 65 states have call successors, (65), 59 states have call predecessors, (65), 61 states have return successors, (103), 64 states have call predecessors, (103), 65 states have call successors, (103) [2023-11-06 22:01:04,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 518 states to 518 states and 658 transitions. [2023-11-06 22:01:04,395 INFO L78 Accepts]: Start accepts. Automaton has 518 states and 658 transitions. Word has length 44 [2023-11-06 22:01:04,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:04,396 INFO L495 AbstractCegarLoop]: Abstraction has 518 states and 658 transitions. [2023-11-06 22:01:04,396 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:01:04,396 INFO L276 IsEmpty]: Start isEmpty. Operand 518 states and 658 transitions. [2023-11-06 22:01:04,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-06 22:01:04,399 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:04,399 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:04,399 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:01:04,400 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:04,400 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:04,400 INFO L85 PathProgramCache]: Analyzing trace with hash 638536279, now seen corresponding path program 1 times [2023-11-06 22:01:04,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:04,400 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1782675523] [2023-11-06 22:01:04,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:04,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:04,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:04,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:01:04,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 22:01:04,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:04,533 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:04,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1782675523] [2023-11-06 22:01:04,534 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1782675523] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:04,534 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:04,534 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:01:04,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385826060] [2023-11-06 22:01:04,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:04,535 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:01:04,535 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:04,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:01:04,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:01:04,536 INFO L87 Difference]: Start difference. First operand 518 states and 658 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:01:04,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:04,998 INFO L93 Difference]: Finished difference Result 1081 states and 1468 transitions. [2023-11-06 22:01:04,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:01:04,999 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2023-11-06 22:01:05,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:05,010 INFO L225 Difference]: With dead ends: 1081 [2023-11-06 22:01:05,011 INFO L226 Difference]: Without dead ends: 1079 [2023-11-06 22:01:05,013 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:01:05,014 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 292 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 128 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 297 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 128 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:05,017 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [297 Valid, 208 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [128 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:01:05,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1079 states. [2023-11-06 22:01:05,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1079 to 957. [2023-11-06 22:01:05,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 957 states, 718 states have (on average 1.2604456824512535) internal successors, (905), 773 states have internal predecessors, (905), 130 states have call successors, (130), 92 states have call predecessors, (130), 108 states have return successors, (275), 122 states have call predecessors, (275), 130 states have call successors, (275) [2023-11-06 22:01:05,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 957 states to 957 states and 1310 transitions. [2023-11-06 22:01:05,173 INFO L78 Accepts]: Start accepts. Automaton has 957 states and 1310 transitions. Word has length 48 [2023-11-06 22:01:05,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:05,174 INFO L495 AbstractCegarLoop]: Abstraction has 957 states and 1310 transitions. [2023-11-06 22:01:05,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:01:05,174 INFO L276 IsEmpty]: Start isEmpty. Operand 957 states and 1310 transitions. [2023-11-06 22:01:05,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2023-11-06 22:01:05,178 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:05,178 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:05,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:01:05,178 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:05,179 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:05,179 INFO L85 PathProgramCache]: Analyzing trace with hash 1643773510, now seen corresponding path program 1 times [2023-11-06 22:01:05,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:05,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2104265422] [2023-11-06 22:01:05,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:05,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:05,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:05,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:01:05,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:01:05,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:05,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-06 22:01:05,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,304 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:01:05,304 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:05,304 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2104265422] [2023-11-06 22:01:05,305 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2104265422] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:05,305 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:05,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:01:05,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [240878020] [2023-11-06 22:01:05,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:05,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:01:05,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:05,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:01:05,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:05,307 INFO L87 Difference]: Start difference. First operand 957 states and 1310 transitions. Second operand has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:01:05,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:05,767 INFO L93 Difference]: Finished difference Result 1106 states and 1504 transitions. [2023-11-06 22:01:05,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:01:05,768 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 78 [2023-11-06 22:01:05,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:05,772 INFO L225 Difference]: With dead ends: 1106 [2023-11-06 22:01:05,772 INFO L226 Difference]: Without dead ends: 482 [2023-11-06 22:01:05,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:01:05,777 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 272 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 280 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:05,778 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [280 Valid, 295 Invalid, 292 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:01:05,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2023-11-06 22:01:05,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 461. [2023-11-06 22:01:05,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 349 states have (on average 1.2263610315186246) internal successors, (428), 372 states have internal predecessors, (428), 59 states have call successors, (59), 43 states have call predecessors, (59), 52 states have return successors, (129), 59 states have call predecessors, (129), 59 states have call successors, (129) [2023-11-06 22:01:05,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 616 transitions. [2023-11-06 22:01:05,869 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 616 transitions. Word has length 78 [2023-11-06 22:01:05,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:05,869 INFO L495 AbstractCegarLoop]: Abstraction has 461 states and 616 transitions. [2023-11-06 22:01:05,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 4 states have internal predecessors, (65), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:01:05,869 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 616 transitions. [2023-11-06 22:01:05,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2023-11-06 22:01:05,873 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:05,873 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:05,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:01:05,874 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:05,874 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:05,874 INFO L85 PathProgramCache]: Analyzing trace with hash 51891042, now seen corresponding path program 1 times [2023-11-06 22:01:05,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:05,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1785172888] [2023-11-06 22:01:05,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:05,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:05,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:06,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:06,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:01:06,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:06,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2023-11-06 22:01:06,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-06 22:01:06,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,083 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 11 proven. 13 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-06 22:01:06,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:06,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1785172888] [2023-11-06 22:01:06,084 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1785172888] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:06,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [255193500] [2023-11-06 22:01:06,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:06,085 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:06,085 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:06,091 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:06,111 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:01:06,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,264 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-06 22:01:06,274 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:06,374 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:06,374 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:01:06,375 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [255193500] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:06,375 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:01:06,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-06 22:01:06,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574808808] [2023-11-06 22:01:06,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:06,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:01:06,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:06,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:01:06,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:01:06,403 INFO L87 Difference]: Start difference. First operand 461 states and 616 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-06 22:01:06,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:06,486 INFO L93 Difference]: Finished difference Result 783 states and 1072 transitions. [2023-11-06 22:01:06,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:01:06,486 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 86 [2023-11-06 22:01:06,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:06,491 INFO L225 Difference]: With dead ends: 783 [2023-11-06 22:01:06,494 INFO L226 Difference]: Without dead ends: 378 [2023-11-06 22:01:06,497 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:01:06,498 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:06,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:01:06,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2023-11-06 22:01:06,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 378. [2023-11-06 22:01:06,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 378 states, 285 states have (on average 1.2) internal successors, (342), 304 states have internal predecessors, (342), 49 states have call successors, (49), 38 states have call predecessors, (49), 43 states have return successors, (74), 49 states have call predecessors, (74), 49 states have call successors, (74) [2023-11-06 22:01:06,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 465 transitions. [2023-11-06 22:01:06,564 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 465 transitions. Word has length 86 [2023-11-06 22:01:06,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:06,565 INFO L495 AbstractCegarLoop]: Abstraction has 378 states and 465 transitions. [2023-11-06 22:01:06,566 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-06 22:01:06,566 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 465 transitions. [2023-11-06 22:01:06,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2023-11-06 22:01:06,569 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:06,570 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:06,579 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-06 22:01:06,776 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:06,776 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:06,777 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:06,777 INFO L85 PathProgramCache]: Analyzing trace with hash 758030023, now seen corresponding path program 1 times [2023-11-06 22:01:06,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:06,777 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413449926] [2023-11-06 22:01:06,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:06,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:06,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:06,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:01:06,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:01:06,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:06,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:06,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 22:01:07,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 22:01:07,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:01:07,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2023-11-06 22:01:07,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,018 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:01:07,018 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:07,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413449926] [2023-11-06 22:01:07,018 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1413449926] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:07,019 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [137938874] [2023-11-06 22:01:07,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:07,019 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:07,019 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:07,020 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:07,045 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:01:07,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:07,137 INFO L262 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 22:01:07,145 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:07,333 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-06 22:01:07,333 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:01:07,491 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:01:07,491 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [137938874] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:07,492 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-06 22:01:07,492 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2023-11-06 22:01:07,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [225451836] [2023-11-06 22:01:07,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:07,493 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:01:07,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:07,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:01:07,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:01:07,494 INFO L87 Difference]: Start difference. First operand 378 states and 465 transitions. Second operand has 6 states, 6 states have (on average 10.5) internal successors, (63), 5 states have internal predecessors, (63), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-06 22:01:07,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:07,739 INFO L93 Difference]: Finished difference Result 1066 states and 1344 transitions. [2023-11-06 22:01:07,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:01:07,740 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.5) internal successors, (63), 5 states have internal predecessors, (63), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 91 [2023-11-06 22:01:07,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:07,746 INFO L225 Difference]: With dead ends: 1066 [2023-11-06 22:01:07,746 INFO L226 Difference]: Without dead ends: 696 [2023-11-06 22:01:07,748 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 190 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:01:07,749 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 50 mSDsluCounter, 309 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:07,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 397 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:01:07,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 696 states. [2023-11-06 22:01:07,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 696 to 640. [2023-11-06 22:01:07,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2023-11-06 22:01:07,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 770 transitions. [2023-11-06 22:01:07,850 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 770 transitions. Word has length 91 [2023-11-06 22:01:07,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:07,851 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 770 transitions. [2023-11-06 22:01:07,851 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.5) internal successors, (63), 5 states have internal predecessors, (63), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-06 22:01:07,851 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2023-11-06 22:01:07,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2023-11-06 22:01:07,854 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:07,854 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:07,860 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:01:08,059 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:08,060 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:08,060 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:08,060 INFO L85 PathProgramCache]: Analyzing trace with hash -1881348981, now seen corresponding path program 1 times [2023-11-06 22:01:08,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:08,061 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911936210] [2023-11-06 22:01:08,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:08,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:08,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:08,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:01:08,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:01:08,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:01:08,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:08,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-06 22:01:08,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2023-11-06 22:01:08,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:01:08,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2023-11-06 22:01:08,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,262 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:01:08,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:08,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911936210] [2023-11-06 22:01:08,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911936210] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:08,263 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1503228144] [2023-11-06 22:01:08,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:08,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:08,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:08,264 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:08,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:01:08,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:08,387 INFO L262 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:01:08,401 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:08,547 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:01:08,547 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:01:08,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1503228144] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:08,548 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:01:08,548 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2023-11-06 22:01:08,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502916340] [2023-11-06 22:01:08,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:08,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:01:08,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:08,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:01:08,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:01:08,550 INFO L87 Difference]: Start difference. First operand 640 states and 770 transitions. Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-06 22:01:08,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:08,747 INFO L93 Difference]: Finished difference Result 1163 states and 1392 transitions. [2023-11-06 22:01:08,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:01:08,748 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 95 [2023-11-06 22:01:08,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:08,749 INFO L225 Difference]: With dead ends: 1163 [2023-11-06 22:01:08,749 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:01:08,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:01:08,752 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 37 mSDsluCounter, 590 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 749 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:08,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 749 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:01:08,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:01:08,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:01:08,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:01:08,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:01:08,754 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 95 [2023-11-06 22:01:08,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:08,754 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:01:08,754 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-06 22:01:08,755 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:01:08,755 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:01:08,757 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:01:08,768 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:01:08,963 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:08,965 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:01:15,543 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2023-11-06 22:01:15,543 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0))))) [2023-11-06 22:01:15,543 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 469 476) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2023-11-06 22:01:15,544 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (< |old(~methaneLevelCritical~0)| 1)) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~waterLevel~0 2)) (or .cse4 .cse5 .cse6 .cse2 .cse7) (or .cse0 .cse4 .cse6 .cse2 .cse7) (or .cse1 .cse5 .cse2 .cse3 .cse7))) [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2023-11-06 22:01:15,544 INFO L899 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2023-11-06 22:01:15,545 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 378 401) no Hoare annotation was computed. [2023-11-06 22:01:15,545 INFO L895 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse6 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,545 INFO L899 garLoopResultBuilder]: For program point L482-1(line 482) no Hoare annotation was computed. [2023-11-06 22:01:15,545 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0))) (let ((.cse0 (and .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse13)) (.cse6 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse9)) (.cse7 (and .cse11 .cse9 .cse10)) (.cse12 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse6 .cse7 .cse3) (or .cse4 (and .cse8 .cse9 .cse10) (not (= 0 ~systemActive~0))) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse11 .cse1 .cse12 .cse2 (and .cse8 .cse13)) (or .cse4 .cse5 .cse1 .cse6 .cse7 .cse12)))) [2023-11-06 22:01:15,545 INFO L899 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2023-11-06 22:01:15,546 INFO L895 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,546 INFO L895 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse1 (and .cse7 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse8)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse5 .cse4 .cse0 .cse6) (or .cse0 .cse6 .cse2 (and .cse7 .cse8)) (or .cse5 .cse4 .cse0 .cse3) (or .cse5 (not (= 0 ~systemActive~0)))))) [2023-11-06 22:01:15,546 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 296 303) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,546 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 378 401) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse10 (and .cse0 .cse2 .cse9)) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (and .cse8 .cse1 .cse2)) (.cse11 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 (and .cse8 .cse2 .cse9) (not (= 0 ~systemActive~0))) (or .cse4 .cse10 .cse11 .cse5) (or .cse4 (< |old(~waterLevel~0)| 2) .cse10 .cse5 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse11)))) [2023-11-06 22:01:15,547 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse6 .cse3) (or .cse5 .cse0 .cse1 .cse6 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,547 INFO L895 garLoopResultBuilder]: At program point L455-1(lines 436 460) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse7 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse11)) (.cse3 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse12)) (.cse4 (and .cse8 .cse12 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse7 .cse5) (or .cse2 (< |old(~waterLevel~0)| 2) .cse6 .cse7 .cse5) (or .cse8 .cse2 .cse9 .cse6 (and .cse10 .cse11)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse9) (or .cse0 (not (= 0 ~systemActive~0)))))) [2023-11-06 22:01:15,547 INFO L899 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2023-11-06 22:01:15,547 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 22:01:15,547 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse6 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,548 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2023-11-06 22:01:15,548 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2023-11-06 22:01:15,548 INFO L895 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse10 (= 1 ~systemActive~0))) (let ((.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse0 (and .cse5 .cse6 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse10)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse10)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 (and .cse5 .cse6 .cse7) (not (= 0 ~systemActive~0))) (or .cse1 .cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9) .cse2 (and .cse5 .cse6 .cse10 .cse9)) (or (and .cse11 .cse6 .cse12 .cse7 .cse9) .cse4 .cse13 .cse1 .cse8 (and .cse5 .cse6 .cse10 .cse7 .cse9)) (or .cse13 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse13 .cse1 (and .cse11 .cse12 .cse7) (and .cse5 .cse6 .cse10 .cse7) .cse3)))) [2023-11-06 22:01:15,548 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2023-11-06 22:01:15,548 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 477 487) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0) .cse5) .cse3 .cse6) (or .cse7 .cse4 .cse1 .cse2) (or .cse1 (< |old(~waterLevel~0)| 2) (and .cse0 .cse5) .cse3 .cse6) (or .cse7 .cse4 .cse1 .cse6) (or .cse7 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,549 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 488 496) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse9 (and .cse1 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse2)) (.cse7 (< ~methaneLevelCritical~0 1))) (and (or .cse0 (and .cse1 .cse2 .cse3 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (not (= 0 ~systemActive~0))) (let ((.cse5 (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse4 (and .cse1 .cse5 .cse2 .cse3) .cse6 (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse3) .cse7)) (or .cse6 (< |old(~waterLevel~0)| 2) .cse8 .cse9 .cse7) (or .cse6 .cse10 .cse8) (or .cse0 .cse4 .cse6 .cse10) (or .cse4 .cse6 .cse8 .cse9 .cse7)))) [2023-11-06 22:01:15,549 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2023-11-06 22:01:15,549 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2023-11-06 22:01:15,549 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2023-11-06 22:01:15,549 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2023-11-06 22:01:15,549 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2023-11-06 22:01:15,549 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 182) the Hoare annotation is: true [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 217 227) the Hoare annotation is: true [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2023-11-06 22:01:15,550 INFO L899 garLoopResultBuilder]: For program point L556-1(lines 556 562) no Hoare annotation was computed. [2023-11-06 22:01:15,557 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 579 585) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:01:15,558 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 231 253) the Hoare annotation is: true [2023-11-06 22:01:15,558 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:01:15,558 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2023-11-06 22:01:15,558 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:01:15,558 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2023-11-06 22:01:15,559 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:01:15,559 INFO L902 garLoopResultBuilder]: At program point L367(lines 306 371) the Hoare annotation is: true [2023-11-06 22:01:15,559 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:01:15,559 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2023-11-06 22:01:15,559 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2023-11-06 22:01:15,559 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:01:15,560 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2023-11-06 22:01:15,560 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:01:15,560 INFO L895 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2023-11-06 22:01:15,560 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:01:15,560 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 586 592) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:01:15,560 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2023-11-06 22:01:15,561 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2023-11-06 22:01:15,561 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 258 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:01:15,561 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 552 566) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2023-11-06 22:01:15,561 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2023-11-06 22:01:15,562 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2023-11-06 22:01:15,563 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2023-11-06 22:01:15,563 INFO L899 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2023-11-06 22:01:15,564 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 593 601) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:01:15,564 INFO L895 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:01:15,564 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:01:15,565 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 461 468) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2023-11-06 22:01:15,565 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 410 434) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:01:15,565 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse6)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse2 (not .cse5)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 (< |old(~pumpRunning~0)| 1))))) [2023-11-06 22:01:15,565 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 136 149) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 .cse4 .cse5 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:01:15,566 INFO L899 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2023-11-06 22:01:15,566 INFO L899 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2023-11-06 22:01:15,566 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2023-11-06 22:01:15,566 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 533 551) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not .cse8)) (.cse0 (not .cse7)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse7 .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse3 .cse4 .cse5 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1 .cse3 .cse4 .cse5)))) [2023-11-06 22:01:15,567 INFO L899 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2023-11-06 22:01:15,567 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2023-11-06 22:01:15,567 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:01:15,567 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-06 22:01:15,567 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2023-11-06 22:01:15,567 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:01:15,568 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:01:15,568 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse4))) [2023-11-06 22:01:15,570 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:15,575 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:01:15,617 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:01:15 BoogieIcfgContainer [2023-11-06 22:01:15,617 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:01:15,618 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:01:15,618 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:01:15,618 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:01:15,619 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:01:01" (3/4) ... [2023-11-06 22:01:15,621 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:01:15,625 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:01:15,625 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:01:15,625 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:01:15,625 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:01:15,626 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:01:15,626 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:01:15,626 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:01:15,626 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:01:15,641 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:01:15,642 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:01:15,642 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:01:15,643 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:01:15,644 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:01:15,673 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,674 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)))) && ((((((((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)) || !((\old(pumpRunning) == 0))) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,676 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,676 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,676 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:01:15,677 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:01:15,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)))) && ((((((((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)) || !((\old(pumpRunning) == 0))) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:01:15,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:01:15,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:01:15,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:01:15,734 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:01:15,735 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:01:15,735 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:01:15,736 INFO L158 Benchmark]: Toolchain (without parser) took 15075.42ms. Allocated memory was 151.0MB in the beginning and 299.9MB in the end (delta: 148.9MB). Free memory was 105.1MB in the beginning and 213.3MB in the end (delta: -108.2MB). Peak memory consumption was 42.3MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,736 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 58.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:01:15,737 INFO L158 Benchmark]: CACSL2BoogieTranslator took 470.47ms. Allocated memory is still 151.0MB. Free memory was 105.1MB in the beginning and 85.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,737 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.13ms. Allocated memory is still 151.0MB. Free memory was 85.7MB in the beginning and 83.3MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,737 INFO L158 Benchmark]: Boogie Preprocessor took 33.50ms. Allocated memory is still 151.0MB. Free memory was 83.3MB in the beginning and 81.8MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:01:15,738 INFO L158 Benchmark]: RCFGBuilder took 545.88ms. Allocated memory is still 151.0MB. Free memory was 81.8MB in the beginning and 114.1MB in the end (delta: -32.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,738 INFO L158 Benchmark]: TraceAbstraction took 13849.01ms. Allocated memory was 151.0MB in the beginning and 299.9MB in the end (delta: 148.9MB). Free memory was 113.5MB in the beginning and 221.7MB in the end (delta: -108.2MB). Peak memory consumption was 170.7MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,739 INFO L158 Benchmark]: Witness Printer took 117.75ms. Allocated memory is still 299.9MB. Free memory was 221.7MB in the beginning and 213.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:01:15,741 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 58.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 470.47ms. Allocated memory is still 151.0MB. Free memory was 105.1MB in the beginning and 85.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.13ms. Allocated memory is still 151.0MB. Free memory was 85.7MB in the beginning and 83.3MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.50ms. Allocated memory is still 151.0MB. Free memory was 83.3MB in the beginning and 81.8MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 545.88ms. Allocated memory is still 151.0MB. Free memory was 81.8MB in the beginning and 114.1MB in the end (delta: -32.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 13849.01ms. Allocated memory was 151.0MB in the beginning and 299.9MB in the end (delta: 148.9MB). Free memory was 113.5MB in the beginning and 221.7MB in the end (delta: -108.2MB). Peak memory consumption was 170.7MB. Max. memory is 16.1GB. * Witness Printer took 117.75ms. Allocated memory is still 299.9MB. Free memory was 221.7MB in the beginning and 213.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] - GenericResultAtLocation [Line: 254]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [254] - GenericResultAtLocation [Line: 295]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [295] - GenericResultAtLocation [Line: 304]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] - GenericResultAtLocation [Line: 372]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [372] - GenericResultAtLocation [Line: 567]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [567] - GenericResultAtLocation [Line: 602]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [602] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1198 SdHoareTripleChecker+Valid, 1.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1165 mSDsluCounter, 3604 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2347 mSDsCounter, 318 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 869 IncrementalHoareTripleChecker+Invalid, 1187 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 318 mSolverCounterUnsat, 1257 mSDtfsCounter, 869 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 531 GetRequests, 449 SyntacticMatches, 1 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=957occurred in iteration=8, InterpolantAutomatonStates: 71, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 240 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1639 PreInvPairs, 1865 NumberOfFragments, 2542 HoareAnnotationTreeSize, 1639 FomulaSimplifications, 1665 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 43 FomulaSimplificationsInter, 13420 FormulaSimplificationTreeSizeReductionInter, 6.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 917 NumberOfCodeBlocks, 917 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 992 ConstructedInterpolants, 0 QuantifiedInterpolants, 1963 SizeOfPredicates, 7 NumberOfNonLiveVariables, 958 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 234/256 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive)) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)))) && ((((((((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)) || !((\old(pumpRunning) == 0))) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && (tmp == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || ((((1 <= tmp) && (pumpRunning == 0)) && (1 <= \result)) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:01:15,782 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_03ee8546-5989-4035-bfd6-d8976392bf5f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE