./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:45:47,558 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:45:47,631 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:45:47,635 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:45:47,636 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:45:47,661 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:45:47,662 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:45:47,663 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:45:47,664 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:45:47,665 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:45:47,666 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:45:47,666 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:45:47,667 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:45:47,668 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:45:47,668 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:45:47,669 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:45:47,669 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:45:47,670 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:45:47,671 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:45:47,671 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:45:47,672 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:45:47,679 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:45:47,681 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:45:47,682 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:45:47,682 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:45:47,683 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:45:47,683 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:45:47,684 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:45:47,684 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:45:47,685 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:45:47,685 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:45:47,686 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:45:47,686 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:45:47,687 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:45:47,687 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:45:47,687 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:45:47,688 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:45:47,688 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:45:47,689 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:45:47,689 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 [2023-11-06 22:45:48,000 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:45:48,039 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:45:48,042 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:45:48,043 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:45:48,044 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:45:48,046 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2023-11-06 22:45:51,197 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:45:51,527 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:45:51,528 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2023-11-06 22:45:51,546 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/data/77c17ce6c/e4e75a97ebba464d8a255732404560e0/FLAG3e21ce7a2 [2023-11-06 22:45:51,564 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/data/77c17ce6c/e4e75a97ebba464d8a255732404560e0 [2023-11-06 22:45:51,567 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:45:51,569 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:45:51,571 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:45:51,571 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:45:51,577 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:45:51,578 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:45:51" (1/1) ... [2023-11-06 22:45:51,579 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@14cefbbc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:51, skipping insertion in model container [2023-11-06 22:45:51,579 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:45:51" (1/1) ... [2023-11-06 22:45:51,665 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:45:51,964 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2023-11-06 22:45:51,987 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:45:52,008 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:45:52,019 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 22:45:52,021 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [150] [2023-11-06 22:45:52,022 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [188] [2023-11-06 22:45:52,022 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [261] [2023-11-06 22:45:52,022 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [484] [2023-11-06 22:45:52,023 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [524] [2023-11-06 22:45:52,023 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [890] [2023-11-06 22:45:52,023 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [899] [2023-11-06 22:45:52,119 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2023-11-06 22:45:52,123 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:45:52,147 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:45:52,147 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52 WrapperNode [2023-11-06 22:45:52,148 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:45:52,149 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:45:52,150 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:45:52,150 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:45:52,159 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,175 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,206 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 199 [2023-11-06 22:45:52,207 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:45:52,208 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:45:52,208 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:45:52,209 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:45:52,219 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,220 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,222 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,223 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,229 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,235 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,237 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,239 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,243 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:45:52,244 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:45:52,244 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:45:52,245 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:45:52,246 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (1/1) ... [2023-11-06 22:45:52,254 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:45:52,273 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:45:52,291 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:45:52,326 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:45:52,354 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:45:52,354 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:45:52,354 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:45:52,355 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:45:52,355 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:45:52,355 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:45:52,355 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:45:52,356 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:45:52,356 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:45:52,356 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:45:52,356 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:45:52,357 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:45:52,357 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:45:52,357 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:45:52,358 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:45:52,358 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:45:52,358 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:45:52,359 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:45:52,359 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:45:52,359 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:45:52,360 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:45:52,361 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:45:52,461 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:45:52,467 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:45:52,890 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:45:52,900 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:45:52,901 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:45:52,904 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:52 BoogieIcfgContainer [2023-11-06 22:45:52,904 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:45:52,907 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:45:52,907 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:45:52,911 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:45:52,911 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:45:51" (1/3) ... [2023-11-06 22:45:52,912 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78a60e4a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:45:52, skipping insertion in model container [2023-11-06 22:45:52,912 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:52" (2/3) ... [2023-11-06 22:45:52,913 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78a60e4a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:45:52, skipping insertion in model container [2023-11-06 22:45:52,913 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:52" (3/3) ... [2023-11-06 22:45:52,915 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product48.cil.c [2023-11-06 22:45:52,934 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:45:52,934 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:45:52,993 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:45:53,000 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7a8d518e, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:45:53,000 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:45:53,008 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:45:53,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:45:53,022 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:53,023 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:53,024 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:53,031 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:53,032 INFO L85 PathProgramCache]: Analyzing trace with hash 1420238352, now seen corresponding path program 1 times [2023-11-06 22:45:53,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:53,043 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625589786] [2023-11-06 22:45:53,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:53,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:53,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:53,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:45:53,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:53,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:53,298 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:53,298 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625589786] [2023-11-06 22:45:53,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625589786] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:53,299 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:53,300 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:45:53,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1109035829] [2023-11-06 22:45:53,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:53,307 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:45:53,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:53,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:45:53,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:45:53,365 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:53,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:53,443 INFO L93 Difference]: Finished difference Result 197 states and 266 transitions. [2023-11-06 22:45:53,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:45:53,445 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:45:53,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:53,459 INFO L225 Difference]: With dead ends: 197 [2023-11-06 22:45:53,459 INFO L226 Difference]: Without dead ends: 94 [2023-11-06 22:45:53,464 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:45:53,468 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:53,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:53,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-11-06 22:45:53,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2023-11-06 22:45:53,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:45:53,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 121 transitions. [2023-11-06 22:45:53,539 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 121 transitions. Word has length 25 [2023-11-06 22:45:53,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:53,541 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 121 transitions. [2023-11-06 22:45:53,541 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:53,542 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 121 transitions. [2023-11-06 22:45:53,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:45:53,546 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:53,546 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:53,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:45:53,547 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:53,548 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:53,548 INFO L85 PathProgramCache]: Analyzing trace with hash -193757144, now seen corresponding path program 1 times [2023-11-06 22:45:53,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:53,549 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [11042098] [2023-11-06 22:45:53,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:53,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:53,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:53,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:45:53,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:53,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:53,688 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:53,688 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [11042098] [2023-11-06 22:45:53,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [11042098] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:53,689 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:53,689 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:45:53,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [407740383] [2023-11-06 22:45:53,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:53,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:45:53,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:53,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:45:53,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:53,693 INFO L87 Difference]: Start difference. First operand 94 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:53,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:53,717 INFO L93 Difference]: Finished difference Result 148 states and 190 transitions. [2023-11-06 22:45:53,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:45:53,718 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:45:53,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:53,720 INFO L225 Difference]: With dead ends: 148 [2023-11-06 22:45:53,720 INFO L226 Difference]: Without dead ends: 85 [2023-11-06 22:45:53,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:53,723 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 17 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:53,724 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:53,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2023-11-06 22:45:53,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2023-11-06 22:45:53,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:45:53,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2023-11-06 22:45:53,741 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 26 [2023-11-06 22:45:53,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:53,742 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2023-11-06 22:45:53,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:53,742 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2023-11-06 22:45:53,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:45:53,748 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:53,748 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:53,749 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:45:53,749 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:53,750 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:53,750 INFO L85 PathProgramCache]: Analyzing trace with hash -150671396, now seen corresponding path program 1 times [2023-11-06 22:45:53,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:53,750 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1745261467] [2023-11-06 22:45:53,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:53,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:53,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:54,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:45:54,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:54,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:54,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:54,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1745261467] [2023-11-06 22:45:54,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1745261467] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:54,077 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:54,077 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:45:54,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1754158169] [2023-11-06 22:45:54,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:54,078 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:45:54,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:54,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:45:54,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:45:54,080 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:54,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:54,420 INFO L93 Difference]: Finished difference Result 296 states and 393 transitions. [2023-11-06 22:45:54,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:45:54,421 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:45:54,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:54,425 INFO L225 Difference]: With dead ends: 296 [2023-11-06 22:45:54,425 INFO L226 Difference]: Without dead ends: 219 [2023-11-06 22:45:54,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:45:54,429 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 306 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 306 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:54,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [306 Valid, 477 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:45:54,431 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2023-11-06 22:45:54,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 197. [2023-11-06 22:45:54,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 144 states have (on average 1.3541666666666667) internal successors, (195), 162 states have internal predecessors, (195), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 23 states have call predecessors, (32), 31 states have call successors, (32) [2023-11-06 22:45:54,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 258 transitions. [2023-11-06 22:45:54,476 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 258 transitions. Word has length 31 [2023-11-06 22:45:54,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:54,477 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 258 transitions. [2023-11-06 22:45:54,478 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:54,478 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 258 transitions. [2023-11-06 22:45:54,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:45:54,481 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:54,482 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:54,482 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:45:54,483 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:54,483 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:54,484 INFO L85 PathProgramCache]: Analyzing trace with hash 153261204, now seen corresponding path program 1 times [2023-11-06 22:45:54,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:54,485 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778879507] [2023-11-06 22:45:54,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:54,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:54,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:54,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:45:54,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:54,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:54,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:54,756 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778879507] [2023-11-06 22:45:54,756 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [778879507] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:54,757 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:54,757 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:45:54,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1682013216] [2023-11-06 22:45:54,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:54,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:45:54,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:54,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:45:54,760 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:45:54,760 INFO L87 Difference]: Start difference. First operand 197 states and 258 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:54,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:54,868 INFO L93 Difference]: Finished difference Result 485 states and 645 transitions. [2023-11-06 22:45:54,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:45:54,869 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:45:54,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:54,874 INFO L225 Difference]: With dead ends: 485 [2023-11-06 22:45:54,874 INFO L226 Difference]: Without dead ends: 296 [2023-11-06 22:45:54,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:45:54,880 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 65 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:54,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 383 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:54,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2023-11-06 22:45:54,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 283. [2023-11-06 22:45:54,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 208 states have (on average 1.2884615384615385) internal successors, (268), 227 states have internal predecessors, (268), 40 states have call successors, (40), 34 states have call predecessors, (40), 34 states have return successors, (50), 37 states have call predecessors, (50), 40 states have call successors, (50) [2023-11-06 22:45:54,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 358 transitions. [2023-11-06 22:45:54,941 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 358 transitions. Word has length 34 [2023-11-06 22:45:54,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:54,942 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 358 transitions. [2023-11-06 22:45:54,943 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:54,943 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 358 transitions. [2023-11-06 22:45:54,946 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-06 22:45:54,947 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:54,947 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:54,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:45:54,948 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:54,948 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:54,949 INFO L85 PathProgramCache]: Analyzing trace with hash -622748863, now seen corresponding path program 1 times [2023-11-06 22:45:54,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:54,949 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [199108938] [2023-11-06 22:45:54,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:54,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:54,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:45:55,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:45:55,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:55,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-06 22:45:55,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,115 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:45:55,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:55,116 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [199108938] [2023-11-06 22:45:55,116 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [199108938] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:55,116 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:55,117 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:45:55,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930957679] [2023-11-06 22:45:55,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:55,118 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:45:55,118 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:55,119 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:45:55,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:45:55,120 INFO L87 Difference]: Start difference. First operand 283 states and 358 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:45:55,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:55,451 INFO L93 Difference]: Finished difference Result 622 states and 809 transitions. [2023-11-06 22:45:55,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:45:55,452 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-06 22:45:55,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:55,458 INFO L225 Difference]: With dead ends: 622 [2023-11-06 22:45:55,458 INFO L226 Difference]: Without dead ends: 347 [2023-11-06 22:45:55,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:45:55,468 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 64 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:55,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 361 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:45:55,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2023-11-06 22:45:55,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 335. [2023-11-06 22:45:55,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 335 states, 250 states have (on average 1.272) internal successors, (318), 269 states have internal predecessors, (318), 44 states have call successors, (44), 34 states have call predecessors, (44), 40 states have return successors, (60), 45 states have call predecessors, (60), 44 states have call successors, (60) [2023-11-06 22:45:55,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 335 states to 335 states and 422 transitions. [2023-11-06 22:45:55,583 INFO L78 Accepts]: Start accepts. Automaton has 335 states and 422 transitions. Word has length 57 [2023-11-06 22:45:55,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:55,585 INFO L495 AbstractCegarLoop]: Abstraction has 335 states and 422 transitions. [2023-11-06 22:45:55,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:45:55,586 INFO L276 IsEmpty]: Start isEmpty. Operand 335 states and 422 transitions. [2023-11-06 22:45:55,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-06 22:45:55,595 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:55,596 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:55,602 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:45:55,602 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:55,603 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:55,605 INFO L85 PathProgramCache]: Analyzing trace with hash 78851011, now seen corresponding path program 1 times [2023-11-06 22:45:55,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:55,605 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980330519] [2023-11-06 22:45:55,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:55,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:55,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:45:55,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:45:55,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:55,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-06 22:45:55,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:55,880 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:45:55,881 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:55,881 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980330519] [2023-11-06 22:45:55,881 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980330519] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:55,881 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:55,882 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:45:55,882 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [886342928] [2023-11-06 22:45:55,882 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:55,883 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:45:55,883 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:55,883 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:45:55,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:45:55,884 INFO L87 Difference]: Start difference. First operand 335 states and 422 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:45:56,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:56,153 INFO L93 Difference]: Finished difference Result 680 states and 877 transitions. [2023-11-06 22:45:56,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:45:56,154 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-06 22:45:56,154 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:56,159 INFO L225 Difference]: With dead ends: 680 [2023-11-06 22:45:56,160 INFO L226 Difference]: Without dead ends: 353 [2023-11-06 22:45:56,161 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:45:56,168 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 111 mSDsluCounter, 305 mSDsCounter, 0 mSdLazyCounter, 183 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:56,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 386 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:45:56,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 353 states. [2023-11-06 22:45:56,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 339. [2023-11-06 22:45:56,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 339 states, 254 states have (on average 1.2677165354330708) internal successors, (322), 273 states have internal predecessors, (322), 44 states have call successors, (44), 34 states have call predecessors, (44), 40 states have return successors, (60), 45 states have call predecessors, (60), 44 states have call successors, (60) [2023-11-06 22:45:56,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 339 states to 339 states and 426 transitions. [2023-11-06 22:45:56,228 INFO L78 Accepts]: Start accepts. Automaton has 339 states and 426 transitions. Word has length 57 [2023-11-06 22:45:56,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:56,229 INFO L495 AbstractCegarLoop]: Abstraction has 339 states and 426 transitions. [2023-11-06 22:45:56,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:45:56,229 INFO L276 IsEmpty]: Start isEmpty. Operand 339 states and 426 transitions. [2023-11-06 22:45:56,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-06 22:45:56,232 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:56,233 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:56,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:45:56,233 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:56,233 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:56,234 INFO L85 PathProgramCache]: Analyzing trace with hash 6464453, now seen corresponding path program 1 times [2023-11-06 22:45:56,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:56,234 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486226237] [2023-11-06 22:45:56,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:56,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:56,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:45:56,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:45:56,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:56,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-06 22:45:56,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,416 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:45:56,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:56,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486226237] [2023-11-06 22:45:56,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486226237] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:56,418 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:56,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:45:56,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936147638] [2023-11-06 22:45:56,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:56,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:45:56,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:56,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:45:56,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:45:56,423 INFO L87 Difference]: Start difference. First operand 339 states and 426 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-06 22:45:56,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:56,753 INFO L93 Difference]: Finished difference Result 983 states and 1285 transitions. [2023-11-06 22:45:56,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:45:56,753 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 57 [2023-11-06 22:45:56,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:56,760 INFO L225 Difference]: With dead ends: 983 [2023-11-06 22:45:56,760 INFO L226 Difference]: Without dead ends: 652 [2023-11-06 22:45:56,762 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:45:56,765 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 227 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:56,766 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 302 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:45:56,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2023-11-06 22:45:56,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 645. [2023-11-06 22:45:56,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 645 states, 485 states have (on average 1.245360824742268) internal successors, (604), 516 states have internal predecessors, (604), 83 states have call successors, (83), 75 states have call predecessors, (83), 76 states have return successors, (128), 81 states have call predecessors, (128), 83 states have call successors, (128) [2023-11-06 22:45:56,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 645 states to 645 states and 815 transitions. [2023-11-06 22:45:56,858 INFO L78 Accepts]: Start accepts. Automaton has 645 states and 815 transitions. Word has length 57 [2023-11-06 22:45:56,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:56,859 INFO L495 AbstractCegarLoop]: Abstraction has 645 states and 815 transitions. [2023-11-06 22:45:56,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-06 22:45:56,859 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 815 transitions. [2023-11-06 22:45:56,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-06 22:45:56,861 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:56,862 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:56,862 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:45:56,862 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:56,863 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:56,863 INFO L85 PathProgramCache]: Analyzing trace with hash -681836693, now seen corresponding path program 1 times [2023-11-06 22:45:56,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:56,863 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1795394697] [2023-11-06 22:45:56,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:56,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:56,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:45:56,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:45:57,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:45:57,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:57,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:45:57,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,149 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:45:57,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:57,151 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1795394697] [2023-11-06 22:45:57,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1795394697] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:57,153 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:57,153 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 22:45:57,153 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577962516] [2023-11-06 22:45:57,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:57,154 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:45:57,154 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:57,155 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:45:57,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:45:57,155 INFO L87 Difference]: Start difference. First operand 645 states and 815 transitions. Second operand has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:45:58,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:58,133 INFO L93 Difference]: Finished difference Result 2068 states and 2729 transitions. [2023-11-06 22:45:58,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:45:58,135 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-06 22:45:58,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:58,145 INFO L225 Difference]: With dead ends: 2068 [2023-11-06 22:45:58,146 INFO L226 Difference]: Without dead ends: 1431 [2023-11-06 22:45:58,150 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-06 22:45:58,150 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 411 mSDsluCounter, 454 mSDsCounter, 0 mSdLazyCounter, 586 mSolverCounterSat, 170 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 420 SdHoareTripleChecker+Valid, 522 SdHoareTripleChecker+Invalid, 756 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 170 IncrementalHoareTripleChecker+Valid, 586 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:58,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [420 Valid, 522 Invalid, 756 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [170 Valid, 586 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 22:45:58,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1431 states. [2023-11-06 22:45:58,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1431 to 1372. [2023-11-06 22:45:58,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1372 states, 1013 states have (on average 1.2092793682132281) internal successors, (1225), 1090 states have internal predecessors, (1225), 192 states have call successors, (192), 146 states have call predecessors, (192), 166 states have return successors, (335), 188 states have call predecessors, (335), 192 states have call successors, (335) [2023-11-06 22:45:58,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1372 states to 1372 states and 1752 transitions. [2023-11-06 22:45:58,375 INFO L78 Accepts]: Start accepts. Automaton has 1372 states and 1752 transitions. Word has length 61 [2023-11-06 22:45:58,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:58,375 INFO L495 AbstractCegarLoop]: Abstraction has 1372 states and 1752 transitions. [2023-11-06 22:45:58,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:45:58,376 INFO L276 IsEmpty]: Start isEmpty. Operand 1372 states and 1752 transitions. [2023-11-06 22:45:58,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2023-11-06 22:45:58,383 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:58,384 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:58,384 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:45:58,384 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:58,385 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:58,385 INFO L85 PathProgramCache]: Analyzing trace with hash 1888948891, now seen corresponding path program 1 times [2023-11-06 22:45:58,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:58,385 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [838607702] [2023-11-06 22:45:58,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:58,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:58,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:45:58,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:45:58,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:45:58,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:45:58,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:45:58,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:58,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:45:58,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-06 22:45:58,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2023-11-06 22:45:58,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:45:58,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2023-11-06 22:45:58,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:45:58,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2023-11-06 22:45:58,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,834 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 19 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-06 22:45:58,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:58,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [838607702] [2023-11-06 22:45:58,834 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [838607702] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:45:58,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [674462289] [2023-11-06 22:45:58,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:58,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:45:58,835 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:45:58,841 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:45:58,848 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:45:58,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:58,984 INFO L262 TraceCheckSpWp]: Trace formula consists of 374 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:45:58,994 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:45:59,264 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-06 22:45:59,268 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:45:59,268 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [674462289] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:59,268 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:45:59,269 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [16] total 21 [2023-11-06 22:45:59,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525004522] [2023-11-06 22:45:59,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:59,270 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:45:59,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:59,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:45:59,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:45:59,273 INFO L87 Difference]: Start difference. First operand 1372 states and 1752 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:45:59,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:59,575 INFO L93 Difference]: Finished difference Result 2736 states and 3496 transitions. [2023-11-06 22:45:59,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:45:59,576 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 114 [2023-11-06 22:45:59,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:59,588 INFO L225 Difference]: With dead ends: 2736 [2023-11-06 22:45:59,589 INFO L226 Difference]: Without dead ends: 1372 [2023-11-06 22:45:59,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:45:59,600 INFO L413 NwaCegarLoop]: 193 mSDtfsCounter, 68 mSDsluCounter, 617 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 810 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:59,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 810 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:45:59,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1372 states. [2023-11-06 22:45:59,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1372 to 1372. [2023-11-06 22:45:59,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1372 states, 1013 states have (on average 1.194471865745311) internal successors, (1210), 1090 states have internal predecessors, (1210), 192 states have call successors, (192), 146 states have call predecessors, (192), 166 states have return successors, (298), 188 states have call predecessors, (298), 192 states have call successors, (298) [2023-11-06 22:45:59,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1372 states to 1372 states and 1700 transitions. [2023-11-06 22:45:59,793 INFO L78 Accepts]: Start accepts. Automaton has 1372 states and 1700 transitions. Word has length 114 [2023-11-06 22:45:59,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:59,794 INFO L495 AbstractCegarLoop]: Abstraction has 1372 states and 1700 transitions. [2023-11-06 22:45:59,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:45:59,794 INFO L276 IsEmpty]: Start isEmpty. Operand 1372 states and 1700 transitions. [2023-11-06 22:45:59,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-06 22:45:59,804 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:59,804 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:59,827 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:46:00,027 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-06 22:46:00,027 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:46:00,028 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:46:00,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1582774687, now seen corresponding path program 1 times [2023-11-06 22:46:00,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:46:00,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677203014] [2023-11-06 22:46:00,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:46:00,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:46:00,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:46:00,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:46:00,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:46:00,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:46:00,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:46:00,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:46:00,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-06 22:46:00,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-06 22:46:00,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:46:00,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-06 22:46:00,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:46:00,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2023-11-06 22:46:00,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,389 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-06 22:46:00,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:46:00,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677203014] [2023-11-06 22:46:00,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677203014] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:46:00,390 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1554227512] [2023-11-06 22:46:00,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:46:00,390 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:46:00,390 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:46:00,391 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:46:00,428 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:46:00,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:46:00,521 INFO L262 TraceCheckSpWp]: Trace formula consists of 364 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:46:00,525 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:46:00,691 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:46:00,691 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:46:00,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1554227512] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:46:00,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:46:00,692 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2023-11-06 22:46:00,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1306260683] [2023-11-06 22:46:00,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:46:00,693 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:46:00,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:46:00,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:46:00,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:46:00,695 INFO L87 Difference]: Start difference. First operand 1372 states and 1700 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:46:00,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:46:00,975 INFO L93 Difference]: Finished difference Result 2372 states and 2978 transitions. [2023-11-06 22:46:00,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:46:00,976 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2023-11-06 22:46:00,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:46:00,977 INFO L225 Difference]: With dead ends: 2372 [2023-11-06 22:46:00,977 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:46:00,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:46:00,985 INFO L413 NwaCegarLoop]: 183 mSDtfsCounter, 65 mSDsluCounter, 825 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 1008 SdHoareTripleChecker+Invalid, 120 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:46:00,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 1008 Invalid, 120 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:46:00,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:46:00,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:46:00,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:46:00,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:46:00,988 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2023-11-06 22:46:00,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:46:00,989 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:46:00,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-06 22:46:00,989 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:46:00,989 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:46:00,992 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:46:01,004 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:46:01,199 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:46:01,202 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:46:06,992 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 378 385) no Hoare annotation was computed. [2023-11-06 22:46:06,993 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 378 385) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:46:06,993 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 378 385) no Hoare annotation was computed. [2023-11-06 22:46:06,993 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 294 300) no Hoare annotation was computed. [2023-11-06 22:46:06,993 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 294 300) the Hoare annotation is: true [2023-11-06 22:46:06,993 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (< |old(~methaneLevelCritical~0)| 1)))) [2023-11-06 22:46:06,993 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 901 930) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L902 garLoopResultBuilder]: At program point L926(lines 901 930) the Hoare annotation is: true [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point L922(line 922) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point L915(lines 915 919) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L902 garLoopResultBuilder]: At program point L915-1(lines 915 919) the Hoare annotation is: true [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2023-11-06 22:46:06,994 INFO L902 garLoopResultBuilder]: At program point L911-2(lines 911 925) the Hoare annotation is: true [2023-11-06 22:46:06,994 INFO L902 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: true [2023-11-06 22:46:06,994 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2023-11-06 22:46:06,995 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 901 930) the Hoare annotation is: true [2023-11-06 22:46:06,995 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 270 293) no Hoare annotation was computed. [2023-11-06 22:46:06,995 INFO L899 garLoopResultBuilder]: For program point L895(line 895) no Hoare annotation was computed. [2023-11-06 22:46:06,995 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 517) no Hoare annotation was computed. [2023-11-06 22:46:06,995 INFO L899 garLoopResultBuilder]: For program point L503(lines 503 520) no Hoare annotation was computed. [2023-11-06 22:46:06,995 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse0 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:46:06,995 INFO L895 garLoopResultBuilder]: At program point L503-1(lines 495 523) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse2)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1) .cse2 .cse3) (or .cse4 (and .cse0 .cse5) .cse3) (or (and (<= 2 ~waterLevel~0) .cse6) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6) (and .cse0 .cse6 .cse1) .cse7 .cse2) (or .cse4 (and .cse5 .cse1) (and .cse0 .cse6 .cse5) .cse7)))) [2023-11-06 22:46:06,996 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse3 .cse4) (or .cse0 .cse4) (or .cse2 .cse1 .cse3))) [2023-11-06 22:46:06,996 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse4 .cse2))) [2023-11-06 22:46:06,996 INFO L899 garLoopResultBuilder]: For program point L334-1(line 334) no Hoare annotation was computed. [2023-11-06 22:46:06,996 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 514) no Hoare annotation was computed. [2023-11-06 22:46:06,996 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not .cse4)) (.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not .cse9)) (.cse2 (and .cse6 .cse9 .cse3 .cse7 .cse8)) (.cse0 (not .cse3)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse4) (or .cse0 (and .cse6 .cse7 .cse8) .cse5))))) [2023-11-06 22:46:06,997 INFO L895 garLoopResultBuilder]: At program point L347-1(lines 328 352) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse5))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse5 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse2 .cse5)))) [2023-11-06 22:46:06,997 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2023-11-06 22:46:06,997 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 891 898) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse0 .cse3) (or .cse1 .cse2))) [2023-11-06 22:46:06,997 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 270 293) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse5) (or .cse3 .cse4 .cse0)))) [2023-11-06 22:46:06,997 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 22:46:06,997 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse4 .cse2))) [2023-11-06 22:46:06,998 INFO L895 garLoopResultBuilder]: At program point L501(line 501) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse6 .cse3)) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (and .cse3 (not .cse4)) .cse1 .cse5) (or .cse6 .cse4 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 2 ~waterLevel~0) .cse5 .cse4)))) [2023-11-06 22:46:06,998 INFO L899 garLoopResultBuilder]: For program point L501-1(line 501) no Hoare annotation was computed. [2023-11-06 22:46:06,998 INFO L899 garLoopResultBuilder]: For program point L274-1(lines 273 292) no Hoare annotation was computed. [2023-11-06 22:46:06,998 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 344) no Hoare annotation was computed. [2023-11-06 22:46:06,998 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 349) no Hoare annotation was computed. [2023-11-06 22:46:06,998 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 270 293) no Hoare annotation was computed. [2023-11-06 22:46:06,998 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 397 405) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse4) (or (and .cse2 .cse3) .cse5 .cse4) (or .cse1 .cse5))) [2023-11-06 22:46:06,999 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 895) no Hoare annotation was computed. [2023-11-06 22:46:06,999 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-06 22:46:06,999 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:46:06,999 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:46:06,999 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-06 22:46:06,999 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 476 483) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:46:07,000 INFO L895 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-06 22:46:07,000 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2023-11-06 22:46:07,000 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2023-11-06 22:46:07,000 INFO L899 garLoopResultBuilder]: For program point L465(lines 465 471) no Hoare annotation was computed. [2023-11-06 22:46:07,000 INFO L899 garLoopResultBuilder]: For program point L465-1(lines 465 471) no Hoare annotation was computed. [2023-11-06 22:46:07,000 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 962 972) the Hoare annotation is: true [2023-11-06 22:46:07,000 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2023-11-06 22:46:07,000 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 165 171) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:46:07,006 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 973 995) the Hoare annotation is: true [2023-11-06 22:46:07,006 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:46:07,006 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:46:07,006 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 955 961) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:46:07,007 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:46:07,007 INFO L902 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2023-11-06 22:46:07,007 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2023-11-06 22:46:07,007 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2023-11-06 22:46:07,007 INFO L899 garLoopResultBuilder]: For program point L983(lines 983 990) no Hoare annotation was computed. [2023-11-06 22:46:07,007 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-06 22:46:07,008 INFO L899 garLoopResultBuilder]: For program point L983-2(lines 983 990) no Hoare annotation was computed. [2023-11-06 22:46:07,008 INFO L895 garLoopResultBuilder]: At program point L467(line 467) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:46:07,008 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:46:07,010 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 172 178) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:46:07,010 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 487 494) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:46:07,010 INFO L895 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2023-11-06 22:46:07,010 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 461 475) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3))) [2023-11-06 22:46:07,011 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2023-11-06 22:46:07,011 INFO L895 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse6 .cse2 .cse3 .cse4 .cse5))) [2023-11-06 22:46:07,011 INFO L899 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2023-11-06 22:46:07,011 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 179 187) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:46:07,011 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2023-11-06 22:46:07,012 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:46:07,012 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:46:07,012 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1))) [2023-11-06 22:46:07,012 INFO L895 garLoopResultBuilder]: At program point L316(line 316) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 0) .cse0 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0) (not .cse2)))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2)))) [2023-11-06 22:46:07,012 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 318) no Hoare annotation was computed. [2023-11-06 22:46:07,012 INFO L899 garLoopResultBuilder]: For program point L306(lines 306 323) no Hoare annotation was computed. [2023-11-06 22:46:07,013 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 374) no Hoare annotation was computed. [2023-11-06 22:46:07,013 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0))) (and (or (not .cse0) (and .cse1 .cse2) .cse3 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse0) .cse3))) [2023-11-06 22:46:07,013 INFO L895 garLoopResultBuilder]: At program point L368-2(lines 361 377) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1| ~methaneLevelCritical~0)) .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:46:07,013 INFO L899 garLoopResultBuilder]: For program point L366-1(line 366) no Hoare annotation was computed. [2023-11-06 22:46:07,013 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__highWaterSensor_returnLabel#1(lines 353 360) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (< ~methaneLevelCritical~0 1)) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:46:07,014 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 302 326) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:46:07,014 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 455) no Hoare annotation was computed. [2023-11-06 22:46:07,015 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 136 149) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse0 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 .cse2) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse3 .cse2) .cse4) (or (not .cse2) (and .cse0 .cse1) (and .cse1 .cse3) .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:46:07,015 INFO L899 garLoopResultBuilder]: For program point L451-2(lines 451 455) no Hoare annotation was computed. [2023-11-06 22:46:07,015 INFO L895 garLoopResultBuilder]: At program point L321(line 321) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:46:07,015 INFO L899 garLoopResultBuilder]: For program point L321-1(lines 302 326) no Hoare annotation was computed. [2023-11-06 22:46:07,015 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 442 460) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse0 .cse2 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or (not (= ~methaneLevelCritical~0 0)) (and .cse0 .cse1 .cse2) .cse3 .cse4) (or (not .cse2) (and .cse0 .cse1) .cse3 .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:46:07,016 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-06 22:46:07,016 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 302 326) no Hoare annotation was computed. [2023-11-06 22:46:07,016 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 386 396) no Hoare annotation was computed. [2023-11-06 22:46:07,016 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 386 396) the Hoare annotation is: true [2023-11-06 22:46:07,017 INFO L902 garLoopResultBuilder]: At program point L391(line 391) the Hoare annotation is: true [2023-11-06 22:46:07,017 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 386 396) no Hoare annotation was computed. [2023-11-06 22:46:07,017 INFO L899 garLoopResultBuilder]: For program point L391-1(line 391) no Hoare annotation was computed. [2023-11-06 22:46:07,020 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:46:07,022 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:46:07,064 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:46:07 BoogieIcfgContainer [2023-11-06 22:46:07,070 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:46:07,070 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:46:07,070 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:46:07,071 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:46:07,071 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:52" (3/4) ... [2023-11-06 22:46:07,073 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:46:07,078 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:46:07,078 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:46:07,078 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:46:07,078 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:46:07,079 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:46:07,079 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:46:07,079 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:46:07,079 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:46:07,079 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:46:07,094 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:46:07,095 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:46:07,096 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:46:07,096 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:46:07,097 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:46:07,127 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,127 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,128 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,128 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,129 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,130 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (methaneLevelCritical < 1))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:46:07,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && !((0 == systemActive))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((((2 <= waterLevel) && (tmp == 0)) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0))) || (((pumpRunning == 0) && (tmp == 0)) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:46:07,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:46:07,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,135 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:46:07,135 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= \result) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= \result) && (pumpRunning == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,135 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:46:07,136 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,195 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,195 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,195 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:46:07,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (methaneLevelCritical < 1))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:46:07,197 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && !((0 == systemActive))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((((2 <= waterLevel) && (tmp == 0)) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0))) || (((pumpRunning == 0) && (tmp == 0)) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:46:07,197 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,198 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 22:46:07,198 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:46:07,198 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,198 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:46:07,198 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= \result) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= \result) && (pumpRunning == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,199 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:46:07,199 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:46:07,221 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:46:07,222 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:46:07,222 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:46:07,223 INFO L158 Benchmark]: Toolchain (without parser) took 15653.74ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 117.1MB in the beginning and 134.6MB in the end (delta: -17.5MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,223 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 104.9MB. Free memory is still 54.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:46:07,224 INFO L158 Benchmark]: CACSL2BoogieTranslator took 577.41ms. Allocated memory is still 159.4MB. Free memory was 116.8MB in the beginning and 97.4MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,224 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.10ms. Allocated memory is still 159.4MB. Free memory was 97.4MB in the beginning and 95.2MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,225 INFO L158 Benchmark]: Boogie Preprocessor took 35.29ms. Allocated memory is still 159.4MB. Free memory was 95.2MB in the beginning and 93.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,225 INFO L158 Benchmark]: RCFGBuilder took 659.83ms. Allocated memory is still 159.4MB. Free memory was 93.5MB in the beginning and 125.1MB in the end (delta: -31.6MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,226 INFO L158 Benchmark]: TraceAbstraction took 14163.06ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 124.7MB in the beginning and 141.9MB in the end (delta: -17.2MB). Peak memory consumption was 138.9MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,226 INFO L158 Benchmark]: Witness Printer took 152.06ms. Allocated memory is still 237.0MB. Free memory was 141.9MB in the beginning and 134.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:46:07,229 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 104.9MB. Free memory is still 54.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 577.41ms. Allocated memory is still 159.4MB. Free memory was 116.8MB in the beginning and 97.4MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.10ms. Allocated memory is still 159.4MB. Free memory was 97.4MB in the beginning and 95.2MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.29ms. Allocated memory is still 159.4MB. Free memory was 95.2MB in the beginning and 93.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 659.83ms. Allocated memory is still 159.4MB. Free memory was 93.5MB in the beginning and 125.1MB in the end (delta: -31.6MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 14163.06ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 124.7MB in the beginning and 141.9MB in the end (delta: -17.2MB). Peak memory consumption was 138.9MB. Max. memory is 16.1GB. * Witness Printer took 152.06ms. Allocated memory is still 237.0MB. Free memory was 141.9MB in the beginning and 134.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [150] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [188] - GenericResultAtLocation [Line: 261]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [261] - GenericResultAtLocation [Line: 484]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [484] - GenericResultAtLocation [Line: 524]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [524] - GenericResultAtLocation [Line: 890]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [890] - GenericResultAtLocation [Line: 899]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [899] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 895]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.0s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1371 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1334 mSDsluCounter, 4573 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3378 mSDsCounter, 341 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1503 IncrementalHoareTripleChecker+Invalid, 1844 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 341 mSolverCounterUnsat, 1195 mSDtfsCounter, 1503 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 423 GetRequests, 318 SyntacticMatches, 0 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 356 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1372occurred in iteration=8, InterpolantAutomatonStates: 83, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 10 MinimizatonAttempts, 127 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2645 PreInvPairs, 3258 NumberOfFragments, 1423 HoareAnnotationTreeSize, 2645 FomulaSimplifications, 1300 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 47 FomulaSimplificationsInter, 20777 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 796 NumberOfCodeBlocks, 796 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 784 ConstructedInterpolants, 0 QuantifiedInterpolants, 1351 SizeOfPredicates, 6 NumberOfNonLiveVariables, 738 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 184/200 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == methaneLevelCritical))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 495]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && !((0 == systemActive))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((((2 <= waterLevel) && (tmp == 0)) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0))) || (((pumpRunning == 0) && (tmp == 0)) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 476]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((0 == systemActive) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 397]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((pumpRunning == 0) && (\result == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((1 <= \result) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= \result) && (pumpRunning == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || ((\old(waterLevel) == waterLevel) && !((0 == systemActive)))) || (methaneLevelCritical < 1))) && (((pumpRunning == 0) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((((tmp___0 == 0) && (pumpRunning == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:46:07,273 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91af4894-34cd-4fa8-9876-96e50b920b54/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE