./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e3065d54459a1af9237785e443ea1bc130aed8710eaae31e283e0fdf62db72d --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:05:17,378 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:05:17,505 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:05:17,511 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:05:17,512 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:05:17,564 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:05:17,565 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:05:17,565 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:05:17,566 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:05:17,567 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:05:17,568 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:05:17,569 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:05:17,570 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:05:17,570 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:05:17,571 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:05:17,572 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:05:17,573 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:05:17,573 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:05:17,574 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:05:17,575 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:05:17,575 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:05:17,576 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:05:17,577 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:05:17,578 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:05:17,579 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:05:17,579 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:05:17,580 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:05:17,581 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:05:17,581 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:05:17,582 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:05:17,583 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:05:17,583 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:05:17,584 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:05:17,585 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:05:17,585 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:05:17,586 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:05:17,586 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:05:17,587 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:05:17,588 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:05:17,588 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e3065d54459a1af9237785e443ea1bc130aed8710eaae31e283e0fdf62db72d [2023-11-06 22:05:17,942 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:05:17,986 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:05:17,990 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:05:17,992 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:05:17,993 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:05:17,995 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c [2023-11-06 22:05:21,177 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:05:21,562 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:05:21,563 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c [2023-11-06 22:05:21,580 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/data/b0a22ecce/5319f0c54a3c4295a22585248af73a98/FLAG7898662da [2023-11-06 22:05:21,601 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/data/b0a22ecce/5319f0c54a3c4295a22585248af73a98 [2023-11-06 22:05:21,605 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:05:21,607 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:05:21,609 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:05:21,609 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:05:21,617 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:05:21,621 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:05:21" (1/1) ... [2023-11-06 22:05:21,623 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1b93cc22 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:21, skipping insertion in model container [2023-11-06 22:05:21,623 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:05:21" (1/1) ... [2023-11-06 22:05:21,723 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:05:22,029 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c[13371,13384] [2023-11-06 22:05:22,103 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:05:22,122 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:05:22,143 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49] [2023-11-06 22:05:22,145 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [91] [2023-11-06 22:05:22,145 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [196] [2023-11-06 22:05:22,145 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [562] [2023-11-06 22:05:22,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [571] [2023-11-06 22:05:22,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [606] [2023-11-06 22:05:22,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [671] [2023-11-06 22:05:22,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [779] [2023-11-06 22:05:22,207 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/sv-benchmarks/c/product-lines/minepump_spec2_product61.cil.c[13371,13384] [2023-11-06 22:05:22,256 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:05:22,294 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:05:22,294 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22 WrapperNode [2023-11-06 22:05:22,296 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:05:22,299 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:05:22,299 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:05:22,299 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:05:22,309 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,346 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,388 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 223 [2023-11-06 22:05:22,388 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:05:22,389 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:05:22,390 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:05:22,390 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:05:22,403 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,403 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,407 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,407 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,415 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,420 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,423 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,425 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,429 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:05:22,430 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:05:22,430 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:05:22,431 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:05:22,432 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (1/1) ... [2023-11-06 22:05:22,440 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:05:22,460 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:05:22,478 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:05:22,499 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:05:22,531 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:05:22,531 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:05:22,532 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:05:22,532 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:05:22,532 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:05:22,532 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:05:22,532 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:05:22,533 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:05:22,533 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:05:22,533 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:22,533 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:22,533 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:05:22,534 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:05:22,534 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:05:22,534 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:05:22,534 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:05:22,535 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:05:22,535 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:05:22,536 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:05:22,536 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:05:22,536 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:05:22,536 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:05:22,536 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:05:22,537 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:05:22,654 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:05:22,657 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:05:23,052 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:05:23,063 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:05:23,063 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:05:23,066 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:23 BoogieIcfgContainer [2023-11-06 22:05:23,066 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:05:23,069 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:05:23,069 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:05:23,073 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:05:23,073 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:05:21" (1/3) ... [2023-11-06 22:05:23,074 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@395a0f1f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:05:23, skipping insertion in model container [2023-11-06 22:05:23,074 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:22" (2/3) ... [2023-11-06 22:05:23,074 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@395a0f1f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:05:23, skipping insertion in model container [2023-11-06 22:05:23,074 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:23" (3/3) ... [2023-11-06 22:05:23,076 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product61.cil.c [2023-11-06 22:05:23,099 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:05:23,099 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:05:23,167 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:05:23,175 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@214ae348, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:05:23,176 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:05:23,182 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 22:05:23,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:05:23,200 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:23,200 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:23,202 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:23,212 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:23,212 INFO L85 PathProgramCache]: Analyzing trace with hash 614135748, now seen corresponding path program 1 times [2023-11-06 22:05:23,224 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:23,225 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117322212] [2023-11-06 22:05:23,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:23,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:23,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:23,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:05:23,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:23,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:23,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:23,454 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117322212] [2023-11-06 22:05:23,455 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117322212] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:23,456 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:23,456 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:05:23,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544337894] [2023-11-06 22:05:23,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:23,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:05:23,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:23,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:05:23,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:05:23,547 INFO L87 Difference]: Start difference. First operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:23,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:23,633 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2023-11-06 22:05:23,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:05:23,635 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:05:23,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:23,653 INFO L225 Difference]: With dead ends: 211 [2023-11-06 22:05:23,653 INFO L226 Difference]: Without dead ends: 101 [2023-11-06 22:05:23,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:05:23,668 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:23,669 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:05:23,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2023-11-06 22:05:23,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2023-11-06 22:05:23,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 82 states have internal predecessors, (96), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-06 22:05:23,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2023-11-06 22:05:23,783 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 25 [2023-11-06 22:05:23,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:23,783 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2023-11-06 22:05:23,784 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:23,784 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2023-11-06 22:05:23,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:05:23,789 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:23,789 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:23,789 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:05:23,790 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:23,791 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:23,791 INFO L85 PathProgramCache]: Analyzing trace with hash 1570881816, now seen corresponding path program 1 times [2023-11-06 22:05:23,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:23,791 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485322444] [2023-11-06 22:05:23,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:23,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:23,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:23,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:05:23,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:23,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:23,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:23,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485322444] [2023-11-06 22:05:23,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485322444] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:23,959 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:23,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:05:23,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558264443] [2023-11-06 22:05:23,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:23,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:05:23,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:23,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:05:23,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:23,968 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:24,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:24,014 INFO L93 Difference]: Finished difference Result 167 states and 217 transitions. [2023-11-06 22:05:24,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:05:24,015 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:05:24,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:24,022 INFO L225 Difference]: With dead ends: 167 [2023-11-06 22:05:24,025 INFO L226 Difference]: Without dead ends: 92 [2023-11-06 22:05:24,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:24,030 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 12 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:24,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 220 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:05:24,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-06 22:05:24,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-06 22:05:24,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.328358208955224) internal successors, (89), 76 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:05:24,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2023-11-06 22:05:24,049 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 26 [2023-11-06 22:05:24,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:24,050 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2023-11-06 22:05:24,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:24,051 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2023-11-06 22:05:24,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:05:24,053 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:24,053 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:24,053 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:05:24,054 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:24,054 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:24,055 INFO L85 PathProgramCache]: Analyzing trace with hash 2142316214, now seen corresponding path program 1 times [2023-11-06 22:05:24,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:24,055 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119673270] [2023-11-06 22:05:24,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:24,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:24,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:24,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:24,194 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:24,194 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119673270] [2023-11-06 22:05:24,194 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119673270] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:24,195 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:24,195 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:05:24,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612807581] [2023-11-06 22:05:24,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:24,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:05:24,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:24,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:05:24,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:24,198 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:24,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:24,228 INFO L93 Difference]: Finished difference Result 176 states and 231 transitions. [2023-11-06 22:05:24,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:05:24,229 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 22:05:24,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:24,231 INFO L225 Difference]: With dead ends: 176 [2023-11-06 22:05:24,231 INFO L226 Difference]: Without dead ends: 92 [2023-11-06 22:05:24,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:24,235 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 100 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:24,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 117 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:05:24,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-06 22:05:24,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-06 22:05:24,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 76 states have internal predecessors, (88), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:05:24,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 118 transitions. [2023-11-06 22:05:24,256 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 118 transitions. Word has length 30 [2023-11-06 22:05:24,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:24,257 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 118 transitions. [2023-11-06 22:05:24,257 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:05:24,257 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 118 transitions. [2023-11-06 22:05:24,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:05:24,260 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:24,261 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:24,261 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:05:24,261 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:24,262 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:24,262 INFO L85 PathProgramCache]: Analyzing trace with hash -92443095, now seen corresponding path program 1 times [2023-11-06 22:05:24,262 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:24,262 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837357798] [2023-11-06 22:05:24,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:24,263 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:24,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:24,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:24,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:24,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:05:24,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:24,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:24,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:24,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837357798] [2023-11-06 22:05:24,519 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837357798] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:24,519 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:24,520 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:24,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634093932] [2023-11-06 22:05:24,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:24,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:24,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:24,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:24,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:24,523 INFO L87 Difference]: Start difference. First operand 92 states and 118 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:24,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:24,880 INFO L93 Difference]: Finished difference Result 264 states and 338 transitions. [2023-11-06 22:05:24,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:05:24,881 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 45 [2023-11-06 22:05:24,882 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:24,884 INFO L225 Difference]: With dead ends: 264 [2023-11-06 22:05:24,885 INFO L226 Difference]: Without dead ends: 180 [2023-11-06 22:05:24,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:05:24,889 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 226 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:24,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 311 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:24,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2023-11-06 22:05:24,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 174. [2023-11-06 22:05:24,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2578125) internal successors, (161), 137 states have internal predecessors, (161), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:05:24,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 212 transitions. [2023-11-06 22:05:24,951 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 212 transitions. Word has length 45 [2023-11-06 22:05:24,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:24,952 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 212 transitions. [2023-11-06 22:05:24,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:24,953 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 212 transitions. [2023-11-06 22:05:24,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 22:05:24,966 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:24,967 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:24,967 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:05:24,967 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:24,968 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:24,969 INFO L85 PathProgramCache]: Analyzing trace with hash 440823665, now seen corresponding path program 1 times [2023-11-06 22:05:24,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:24,970 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17090844] [2023-11-06 22:05:24,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:24,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:25,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:25,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:25,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:25,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 22:05:25,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:25,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:25,344 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17090844] [2023-11-06 22:05:25,344 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17090844] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:25,345 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:25,345 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:05:25,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866380028] [2023-11-06 22:05:25,348 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:25,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:05:25,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:25,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:05:25,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:05:25,351 INFO L87 Difference]: Start difference. First operand 174 states and 212 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:05:25,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:25,699 INFO L93 Difference]: Finished difference Result 348 states and 425 transitions. [2023-11-06 22:05:25,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:05:25,700 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2023-11-06 22:05:25,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:25,709 INFO L225 Difference]: With dead ends: 348 [2023-11-06 22:05:25,710 INFO L226 Difference]: Without dead ends: 182 [2023-11-06 22:05:25,713 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:05:25,721 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 161 mSDsluCounter, 299 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:25,722 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 397 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:25,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-06 22:05:25,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 172. [2023-11-06 22:05:25,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 126 states have (on average 1.2301587301587302) internal successors, (155), 135 states have internal predecessors, (155), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:05:25,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 206 transitions. [2023-11-06 22:05:25,782 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 206 transitions. Word has length 51 [2023-11-06 22:05:25,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:25,783 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 206 transitions. [2023-11-06 22:05:25,784 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:05:25,784 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 206 transitions. [2023-11-06 22:05:25,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-06 22:05:25,785 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:25,786 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:25,786 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:05:25,786 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:25,787 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:25,787 INFO L85 PathProgramCache]: Analyzing trace with hash 296938365, now seen corresponding path program 1 times [2023-11-06 22:05:25,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:25,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [940578358] [2023-11-06 22:05:25,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:25,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:25,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:25,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:25,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:25,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:26,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:26,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:05:26,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,051 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:26,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:26,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [940578358] [2023-11-06 22:05:26,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [940578358] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:26,052 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:26,053 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:05:26,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [289491952] [2023-11-06 22:05:26,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:26,053 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:05:26,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:26,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:05:26,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:05:26,056 INFO L87 Difference]: Start difference. First operand 172 states and 206 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:05:26,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:26,324 INFO L93 Difference]: Finished difference Result 346 states and 423 transitions. [2023-11-06 22:05:26,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:05:26,325 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-06 22:05:26,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:26,328 INFO L225 Difference]: With dead ends: 346 [2023-11-06 22:05:26,328 INFO L226 Difference]: Without dead ends: 182 [2023-11-06 22:05:26,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:05:26,336 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 76 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:26,340 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 410 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:26,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-06 22:05:26,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 175. [2023-11-06 22:05:26,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 129 states have (on average 1.2248062015503876) internal successors, (158), 138 states have internal predecessors, (158), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:05:26,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 209 transitions. [2023-11-06 22:05:26,381 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 209 transitions. Word has length 61 [2023-11-06 22:05:26,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:26,384 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 209 transitions. [2023-11-06 22:05:26,384 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:05:26,384 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 209 transitions. [2023-11-06 22:05:26,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-06 22:05:26,387 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:26,388 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:26,388 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:05:26,388 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:26,389 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:26,389 INFO L85 PathProgramCache]: Analyzing trace with hash 224551807, now seen corresponding path program 1 times [2023-11-06 22:05:26,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:26,390 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77650937] [2023-11-06 22:05:26,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:26,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:26,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:26,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:26,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:26,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:26,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:05:26,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,591 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:26,592 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:26,592 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77650937] [2023-11-06 22:05:26,592 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77650937] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:26,592 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:26,593 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:26,593 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1813406789] [2023-11-06 22:05:26,593 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:26,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:26,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:26,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:26,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:26,597 INFO L87 Difference]: Start difference. First operand 175 states and 209 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:05:26,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:26,816 INFO L93 Difference]: Finished difference Result 352 states and 429 transitions. [2023-11-06 22:05:26,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:05:26,817 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-06 22:05:26,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:26,822 INFO L225 Difference]: With dead ends: 352 [2023-11-06 22:05:26,822 INFO L226 Difference]: Without dead ends: 185 [2023-11-06 22:05:26,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:05:26,827 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 78 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:26,828 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 320 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:26,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2023-11-06 22:05:26,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 177. [2023-11-06 22:05:26,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.2213740458015268) internal successors, (160), 140 states have internal predecessors, (160), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:05:26,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 211 transitions. [2023-11-06 22:05:26,864 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 211 transitions. Word has length 61 [2023-11-06 22:05:26,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:26,864 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 211 transitions. [2023-11-06 22:05:26,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:05:26,865 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 211 transitions. [2023-11-06 22:05:26,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-06 22:05:26,866 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:26,866 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:26,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:05:26,868 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:26,873 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:26,874 INFO L85 PathProgramCache]: Analyzing trace with hash -619453695, now seen corresponding path program 1 times [2023-11-06 22:05:26,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:26,874 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333061943] [2023-11-06 22:05:26,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:26,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:26,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:26,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:26,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:27,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:27,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:27,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-06 22:05:27,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,056 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:27,056 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:27,056 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333061943] [2023-11-06 22:05:27,056 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333061943] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:27,056 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:27,057 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:27,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98449745] [2023-11-06 22:05:27,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:27,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:27,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:27,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:27,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:27,059 INFO L87 Difference]: Start difference. First operand 177 states and 211 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:05:27,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:27,363 INFO L93 Difference]: Finished difference Result 470 states and 590 transitions. [2023-11-06 22:05:27,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:05:27,364 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2023-11-06 22:05:27,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:27,367 INFO L225 Difference]: With dead ends: 470 [2023-11-06 22:05:27,367 INFO L226 Difference]: Without dead ends: 301 [2023-11-06 22:05:27,369 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:05:27,370 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 224 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:27,371 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 327 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:27,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 301 states. [2023-11-06 22:05:27,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 299. [2023-11-06 22:05:27,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 221 states have (on average 1.2126696832579185) internal successors, (268), 234 states have internal predecessors, (268), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2023-11-06 22:05:27,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 365 transitions. [2023-11-06 22:05:27,441 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 365 transitions. Word has length 61 [2023-11-06 22:05:27,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:27,441 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 365 transitions. [2023-11-06 22:05:27,441 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:05:27,441 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 365 transitions. [2023-11-06 22:05:27,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-06 22:05:27,443 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:27,443 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:27,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:05:27,444 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:27,444 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:27,444 INFO L85 PathProgramCache]: Analyzing trace with hash -96720153, now seen corresponding path program 1 times [2023-11-06 22:05:27,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:27,445 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697667878] [2023-11-06 22:05:27,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:27,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:27,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:27,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:05:27,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:27,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:27,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:27,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-06 22:05:27,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:27,787 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:27,788 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:27,788 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697667878] [2023-11-06 22:05:27,788 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697667878] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:27,788 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:27,788 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 22:05:27,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [989251910] [2023-11-06 22:05:27,789 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:27,789 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:05:27,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:27,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:05:27,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:05:27,791 INFO L87 Difference]: Start difference. First operand 299 states and 365 transitions. Second operand has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:05:28,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:28,919 INFO L93 Difference]: Finished difference Result 905 states and 1144 transitions. [2023-11-06 22:05:28,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:05:28,920 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2023-11-06 22:05:28,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:28,929 INFO L225 Difference]: With dead ends: 905 [2023-11-06 22:05:28,929 INFO L226 Difference]: Without dead ends: 614 [2023-11-06 22:05:28,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-06 22:05:28,949 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 525 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 717 mSolverCounterSat, 216 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 532 SdHoareTripleChecker+Valid, 467 SdHoareTripleChecker+Invalid, 933 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 216 IncrementalHoareTripleChecker+Valid, 717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:28,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [532 Valid, 467 Invalid, 933 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [216 Valid, 717 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-06 22:05:28,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2023-11-06 22:05:29,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 605. [2023-11-06 22:05:29,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 605 states, 440 states have (on average 1.184090909090909) internal successors, (521), 470 states have internal predecessors, (521), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2023-11-06 22:05:29,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 605 states to 605 states and 742 transitions. [2023-11-06 22:05:29,073 INFO L78 Accepts]: Start accepts. Automaton has 605 states and 742 transitions. Word has length 65 [2023-11-06 22:05:29,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:29,074 INFO L495 AbstractCegarLoop]: Abstraction has 605 states and 742 transitions. [2023-11-06 22:05:29,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:05:29,074 INFO L276 IsEmpty]: Start isEmpty. Operand 605 states and 742 transitions. [2023-11-06 22:05:29,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2023-11-06 22:05:29,085 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:29,085 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:29,085 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:05:29,086 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:29,086 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:29,086 INFO L85 PathProgramCache]: Analyzing trace with hash 567121898, now seen corresponding path program 1 times [2023-11-06 22:05:29,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:29,087 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1760908834] [2023-11-06 22:05:29,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:29,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:29,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:29,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:05:29,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:05:29,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:05:29,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:29,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:29,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:29,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:05:29,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2023-11-06 22:05:29,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2023-11-06 22:05:29,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:29,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2023-11-06 22:05:29,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:05:29,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:29,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2023-11-06 22:05:29,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,575 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 18 proven. 15 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-06 22:05:29,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:29,576 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1760908834] [2023-11-06 22:05:29,576 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1760908834] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:05:29,576 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [416171846] [2023-11-06 22:05:29,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:29,577 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:05:29,577 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:05:29,582 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:05:29,617 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:05:29,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:29,765 INFO L262 TraceCheckSpWp]: Trace formula consists of 404 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:05:29,781 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:05:30,170 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:05:30,175 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:05:30,175 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [416171846] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:30,176 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:05:30,176 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [17] total 23 [2023-11-06 22:05:30,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [36639035] [2023-11-06 22:05:30,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:30,177 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:05:30,177 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:30,178 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:05:30,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=452, Unknown=0, NotChecked=0, Total=506 [2023-11-06 22:05:30,179 INFO L87 Difference]: Start difference. First operand 605 states and 742 transitions. Second operand has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:05:30,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:30,490 INFO L93 Difference]: Finished difference Result 1202 states and 1476 transitions. [2023-11-06 22:05:30,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:05:30,491 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 127 [2023-11-06 22:05:30,491 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:30,496 INFO L225 Difference]: With dead ends: 1202 [2023-11-06 22:05:30,496 INFO L226 Difference]: Without dead ends: 605 [2023-11-06 22:05:30,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 64 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=54, Invalid=452, Unknown=0, NotChecked=0, Total=506 [2023-11-06 22:05:30,500 INFO L413 NwaCegarLoop]: 211 mSDtfsCounter, 74 mSDsluCounter, 876 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 1087 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:30,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 1087 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:30,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 605 states. [2023-11-06 22:05:30,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 605 to 605. [2023-11-06 22:05:30,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 605 states, 440 states have (on average 1.1704545454545454) internal successors, (515), 470 states have internal predecessors, (515), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (122), 86 states have call predecessors, (122), 86 states have call successors, (122) [2023-11-06 22:05:30,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 605 states to 605 states and 723 transitions. [2023-11-06 22:05:30,590 INFO L78 Accepts]: Start accepts. Automaton has 605 states and 723 transitions. Word has length 127 [2023-11-06 22:05:30,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:30,591 INFO L495 AbstractCegarLoop]: Abstraction has 605 states and 723 transitions. [2023-11-06 22:05:30,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:05:30,592 INFO L276 IsEmpty]: Start isEmpty. Operand 605 states and 723 transitions. [2023-11-06 22:05:30,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2023-11-06 22:05:30,595 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:30,595 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:30,612 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:05:30,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:05:30,803 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:30,804 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:30,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1036545062, now seen corresponding path program 1 times [2023-11-06 22:05:30,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:30,804 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1784435619] [2023-11-06 22:05:30,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:30,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:30,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:30,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:30,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:30,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:05:30,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:05:31,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:31,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:05:31,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:31,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:05:31,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-06 22:05:31,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-06 22:05:31,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:31,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2023-11-06 22:05:31,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:05:31,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:31,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2023-11-06 22:05:31,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,171 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-06 22:05:31,171 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:31,172 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1784435619] [2023-11-06 22:05:31,172 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1784435619] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:05:31,172 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [678880537] [2023-11-06 22:05:31,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:31,172 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:05:31,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:05:31,174 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:05:31,209 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:05:31,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:31,348 INFO L262 TraceCheckSpWp]: Trace formula consists of 394 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:05:31,360 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:05:31,569 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:05:31,569 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:05:31,570 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [678880537] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:31,570 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:05:31,570 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-06 22:05:31,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432160366] [2023-11-06 22:05:31,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:31,571 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:05:31,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:31,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:05:31,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:05:31,573 INFO L87 Difference]: Start difference. First operand 605 states and 723 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:05:31,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:31,818 INFO L93 Difference]: Finished difference Result 1030 states and 1246 transitions. [2023-11-06 22:05:31,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:05:31,819 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2023-11-06 22:05:31,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:31,820 INFO L225 Difference]: With dead ends: 1030 [2023-11-06 22:05:31,820 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:05:31,824 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 141 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:05:31,825 INFO L413 NwaCegarLoop]: 189 mSDtfsCounter, 63 mSDsluCounter, 961 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 1150 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:31,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 1150 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:05:31,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:05:31,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:05:31,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:05:31,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:05:31,827 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2023-11-06 22:05:31,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:31,827 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:05:31,828 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:05:31,828 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:05:31,828 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:05:31,831 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:05:31,844 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:05:32,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:05:32,041 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:05:36,032 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 919 926) no Hoare annotation was computed. [2023-11-06 22:05:36,033 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 919 926) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,033 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 919 926) no Hoare annotation was computed. [2023-11-06 22:05:36,034 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 809 815) no Hoare annotation was computed. [2023-11-06 22:05:36,034 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 809 815) the Hoare annotation is: true [2023-11-06 22:05:36,034 INFO L895 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:05:36,034 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:05:36,034 INFO L899 garLoopResultBuilder]: For program point L851(lines 851 859) no Hoare annotation was computed. [2023-11-06 22:05:36,035 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2023-11-06 22:05:36,035 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 770 778) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:05:36,035 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 843 867) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,035 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 1002 1020) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:05:36,036 INFO L895 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse3 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse3 .cse0 .cse2))) [2023-11-06 22:05:36,036 INFO L899 garLoopResultBuilder]: For program point L862-1(lines 843 867) no Hoare annotation was computed. [2023-11-06 22:05:36,036 INFO L899 garLoopResultBuilder]: For program point L1011(lines 1011 1015) no Hoare annotation was computed. [2023-11-06 22:05:36,036 INFO L899 garLoopResultBuilder]: For program point L1011-2(lines 1011 1015) no Hoare annotation was computed. [2023-11-06 22:05:36,036 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 843 867) no Hoare annotation was computed. [2023-11-06 22:05:36,037 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 703 714) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) .cse0 (< |old(~methaneLevelCritical~0)| 1)) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-06 22:05:36,037 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 703 714) no Hoare annotation was computed. [2023-11-06 22:05:36,037 INFO L899 garLoopResultBuilder]: For program point L707-1(lines 703 714) no Hoare annotation was computed. [2023-11-06 22:05:36,037 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 785 808) no Hoare annotation was computed. [2023-11-06 22:05:36,037 INFO L899 garLoopResultBuilder]: For program point L796-1(lines 796 802) no Hoare annotation was computed. [2023-11-06 22:05:36,038 INFO L895 garLoopResultBuilder]: At program point L883(line 883) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,038 INFO L895 garLoopResultBuilder]: At program point L879(line 879) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (and .cse0 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) .cse1 (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-06 22:05:36,038 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-06 22:05:36,038 INFO L899 garLoopResultBuilder]: For program point L875-1(line 875) no Hoare annotation was computed. [2023-11-06 22:05:36,038 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2023-11-06 22:05:36,039 INFO L899 garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed. [2023-11-06 22:05:36,039 INFO L895 garLoopResultBuilder]: At program point L70-1(lines 62 90) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse2 (not .cse5)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not .cse6)) (.cse4 (= ~pumpRunning~0 0))) (and (let ((.cse0 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse0) (and .cse4 .cse5 .cse6 .cse0 .cse1) (and .cse3 .cse4 .cse5 .cse0) (not (= ~methaneLevelCritical~0 0)))) (or .cse2 (and .cse4 .cse5 .cse6 .cse1) (and .cse3 .cse4 .cse5) (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:05:36,039 INFO L895 garLoopResultBuilder]: At program point L888(line 888) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,039 INFO L895 garLoopResultBuilder]: At program point L888-1(lines 869 893) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not .cse4)) (.cse0 (= ~pumpRunning~0 0))) (and (or (and .cse0 .cse1) .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) (and .cse3 .cse0) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse1)) (or .cse2 (and .cse0 .cse4 .cse1) (and .cse3 .cse0 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:05:36,040 INFO L899 garLoopResultBuilder]: For program point L789-1(lines 788 807) no Hoare annotation was computed. [2023-11-06 22:05:36,040 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2023-11-06 22:05:36,040 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 563 570) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,040 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 785 808) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,040 INFO L899 garLoopResultBuilder]: For program point L567(line 567) no Hoare annotation was computed. [2023-11-06 22:05:36,041 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 885) no Hoare annotation was computed. [2023-11-06 22:05:36,041 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 687) no Hoare annotation was computed. [2023-11-06 22:05:36,041 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 785 808) no Hoare annotation was computed. [2023-11-06 22:05:36,041 INFO L895 garLoopResultBuilder]: At program point L683-2(lines 679 690) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 .cse3) (< ~methaneLevelCritical~0 1)) (or .cse3 .cse1 .cse2))) [2023-11-06 22:05:36,041 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 890) no Hoare annotation was computed. [2023-11-06 22:05:36,042 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 938 946) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0))) (or .cse0 (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2) (< ~methaneLevelCritical~0 1))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2023-11-06 22:05:36,042 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 567) no Hoare annotation was computed. [2023-11-06 22:05:36,042 INFO L895 garLoopResultBuilder]: At program point L68(line 68) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse5 .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (and .cse2 .cse5))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3 (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse4)) (or .cse0 .cse1 .cse3 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:05:36,042 INFO L899 garLoopResultBuilder]: For program point L68-1(line 68) no Hoare annotation was computed. [2023-11-06 22:05:36,042 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 94 123) no Hoare annotation was computed. [2023-11-06 22:05:36,043 INFO L902 garLoopResultBuilder]: At program point L119(lines 94 123) the Hoare annotation is: true [2023-11-06 22:05:36,043 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2023-11-06 22:05:36,043 INFO L899 garLoopResultBuilder]: For program point L108(lines 108 112) no Hoare annotation was computed. [2023-11-06 22:05:36,043 INFO L902 garLoopResultBuilder]: At program point L108-1(lines 108 112) the Hoare annotation is: true [2023-11-06 22:05:36,043 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 94 123) the Hoare annotation is: true [2023-11-06 22:05:36,043 INFO L899 garLoopResultBuilder]: For program point L105(line 105) no Hoare annotation was computed. [2023-11-06 22:05:36,044 INFO L902 garLoopResultBuilder]: At program point L104-2(lines 104 118) the Hoare annotation is: true [2023-11-06 22:05:36,044 INFO L902 garLoopResultBuilder]: At program point L100(line 100) the Hoare annotation is: true [2023-11-06 22:05:36,044 INFO L899 garLoopResultBuilder]: For program point L100-1(line 100) no Hoare annotation was computed. [2023-11-06 22:05:36,044 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 715 723) the Hoare annotation is: true [2023-11-06 22:05:36,044 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 715 723) no Hoare annotation was computed. [2023-11-06 22:05:36,044 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 715 723) no Hoare annotation was computed. [2023-11-06 22:05:36,045 INFO L895 garLoopResultBuilder]: At program point L663(lines 616 664) the Hoare annotation is: false [2023-11-06 22:05:36,045 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 159 169) the Hoare annotation is: true [2023-11-06 22:05:36,045 INFO L899 garLoopResultBuilder]: For program point L618(lines 617 662) no Hoare annotation was computed. [2023-11-06 22:05:36,045 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 583 589) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:05:36,045 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 173 195) the Hoare annotation is: true [2023-11-06 22:05:36,045 INFO L899 garLoopResultBuilder]: For program point L647(lines 647 658) no Hoare annotation was computed. [2023-11-06 22:05:36,046 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:05:36,046 INFO L895 garLoopResultBuilder]: At program point L639(line 639) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:05:36,046 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:05:36,046 INFO L895 garLoopResultBuilder]: At program point L660(lines 617 662) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:05:36,046 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2023-11-06 22:05:36,046 INFO L899 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2023-11-06 22:05:36,047 INFO L899 garLoopResultBuilder]: For program point L619(lines 619 623) no Hoare annotation was computed. [2023-11-06 22:05:36,047 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 151 157) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:05:36,047 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:05:36,047 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 657) no Hoare annotation was computed. [2023-11-06 22:05:36,047 INFO L895 garLoopResultBuilder]: At program point L653-2(lines 647 658) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2023-11-06 22:05:36,047 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:05:36,048 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 590 596) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:05:36,048 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:05:36,048 INFO L899 garLoopResultBuilder]: For program point L637(lines 637 643) no Hoare annotation was computed. [2023-11-06 22:05:36,048 INFO L899 garLoopResultBuilder]: For program point L637-1(lines 637 643) no Hoare annotation was computed. [2023-11-06 22:05:36,048 INFO L902 garLoopResultBuilder]: At program point L666(lines 607 670) the Hoare annotation is: true [2023-11-06 22:05:36,048 INFO L899 garLoopResultBuilder]: For program point L183(lines 183 190) no Hoare annotation was computed. [2023-11-06 22:05:36,049 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-06 22:05:36,049 INFO L899 garLoopResultBuilder]: For program point L183-2(lines 183 190) no Hoare annotation was computed. [2023-11-06 22:05:36,049 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 597 605) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:05:36,049 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 766) no Hoare annotation was computed. [2023-11-06 22:05:36,049 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 915) no Hoare annotation was computed. [2023-11-06 22:05:36,050 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-06 22:05:36,050 INFO L895 garLoopResultBuilder]: At program point L909-2(lines 902 918) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) .cse3 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~9#1|)) (< ~methaneLevelCritical~0 1)) (or .cse0 .cse3 .cse2))) [2023-11-06 22:05:36,050 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2023-11-06 22:05:36,050 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 817 841) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,050 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 756 769) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse6)) (.cse3 (and .cse5 (<= 2 ~waterLevel~0) .cse6 .cse1)) (.cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 .cse4) (or (not .cse1) .cse0 .cse3 (< ~methaneLevelCritical~0 1) .cse4)))) [2023-11-06 22:05:36,051 INFO L899 garLoopResultBuilder]: For program point L992(lines 992 996) no Hoare annotation was computed. [2023-11-06 22:05:36,051 INFO L895 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse3)) (.cse1 (and (= ~pumpRunning~0 0) .cse3 .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse2) .cse0 (< ~methaneLevelCritical~0 1) .cse1)))) [2023-11-06 22:05:36,051 INFO L899 garLoopResultBuilder]: For program point L992-2(lines 992 996) no Hoare annotation was computed. [2023-11-06 22:05:36,051 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 983 1001) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse5)) (.cse2 (and .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse5 .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse3 (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse0))) (and (or (not .cse0) .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3)))) [2023-11-06 22:05:36,051 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 817 841) no Hoare annotation was computed. [2023-11-06 22:05:36,052 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 833) no Hoare annotation was computed. [2023-11-06 22:05:36,052 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 838) no Hoare annotation was computed. [2023-11-06 22:05:36,052 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 894 901) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (< ~methaneLevelCritical~0 1)) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2023-11-06 22:05:36,052 INFO L895 garLoopResultBuilder]: At program point L836(line 836) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:05:36,052 INFO L899 garLoopResultBuilder]: For program point L836-1(lines 817 841) no Hoare annotation was computed. [2023-11-06 22:05:36,053 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 691 702) no Hoare annotation was computed. [2023-11-06 22:05:36,053 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 691 702) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:05:36,053 INFO L899 garLoopResultBuilder]: For program point L695-1(lines 691 702) no Hoare annotation was computed. [2023-11-06 22:05:36,053 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 927 937) no Hoare annotation was computed. [2023-11-06 22:05:36,053 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 927 937) the Hoare annotation is: true [2023-11-06 22:05:36,054 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 927 937) no Hoare annotation was computed. [2023-11-06 22:05:36,054 INFO L902 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: true [2023-11-06 22:05:36,054 INFO L899 garLoopResultBuilder]: For program point L932-1(line 932) no Hoare annotation was computed. [2023-11-06 22:05:36,057 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:36,059 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:05:36,090 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:05:36 BoogieIcfgContainer [2023-11-06 22:05:36,090 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:05:36,091 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:05:36,091 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:05:36,091 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:05:36,092 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:23" (3/4) ... [2023-11-06 22:05:36,094 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:05:36,099 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:05:36,099 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:05:36,099 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:05:36,099 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:05:36,100 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:05:36,100 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:05:36,100 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:36,100 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:05:36,100 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:05:36,101 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:05:36,110 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2023-11-06 22:05:36,111 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:05:36,112 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:05:36,113 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:05:36,113 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:05:36,145 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,146 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (methaneLevelCritical < 1))) [2023-11-06 22:05:36,147 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive)) && (tmp == 0))) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:05:36,148 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((1 <= \result) && (pumpRunning == 0)))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:05:36,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 22:05:36,194 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,194 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (methaneLevelCritical < 1))) [2023-11-06 22:05:36,195 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive)) && (tmp == 0))) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:05:36,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,196 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,197 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((1 <= \result) && (pumpRunning == 0)))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:05:36,197 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:05:36,197 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 22:05:36,221 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:05:36,222 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:05:36,222 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:05:36,223 INFO L158 Benchmark]: Toolchain (without parser) took 14616.62ms. Allocated memory was 178.3MB in the beginning and 257.9MB in the end (delta: 79.7MB). Free memory was 147.9MB in the beginning and 166.3MB in the end (delta: -18.3MB). Peak memory consumption was 61.1MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,224 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 125.8MB. Free memory is still 97.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:05:36,224 INFO L158 Benchmark]: CACSL2BoogieTranslator took 688.77ms. Allocated memory is still 178.3MB. Free memory was 147.9MB in the beginning and 128.0MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,225 INFO L158 Benchmark]: Boogie Procedure Inliner took 90.15ms. Allocated memory is still 178.3MB. Free memory was 128.0MB in the beginning and 125.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,225 INFO L158 Benchmark]: Boogie Preprocessor took 39.89ms. Allocated memory is still 178.3MB. Free memory was 125.9MB in the beginning and 124.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:05:36,225 INFO L158 Benchmark]: RCFGBuilder took 635.84ms. Allocated memory is still 178.3MB. Free memory was 124.6MB in the beginning and 134.6MB in the end (delta: -10.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,226 INFO L158 Benchmark]: TraceAbstraction took 13021.94ms. Allocated memory was 178.3MB in the beginning and 257.9MB in the end (delta: 79.7MB). Free memory was 133.7MB in the beginning and 174.6MB in the end (delta: -40.9MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,226 INFO L158 Benchmark]: Witness Printer took 131.54ms. Allocated memory is still 257.9MB. Free memory was 174.6MB in the beginning and 166.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:05:36,229 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 125.8MB. Free memory is still 97.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 688.77ms. Allocated memory is still 178.3MB. Free memory was 147.9MB in the beginning and 128.0MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 90.15ms. Allocated memory is still 178.3MB. Free memory was 128.0MB in the beginning and 125.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.89ms. Allocated memory is still 178.3MB. Free memory was 125.9MB in the beginning and 124.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 635.84ms. Allocated memory is still 178.3MB. Free memory was 124.6MB in the beginning and 134.6MB in the end (delta: -10.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * TraceAbstraction took 13021.94ms. Allocated memory was 178.3MB in the beginning and 257.9MB in the end (delta: 79.7MB). Free memory was 133.7MB in the beginning and 174.6MB in the end (delta: -40.9MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. * Witness Printer took 131.54ms. Allocated memory is still 257.9MB. Free memory was 174.6MB in the beginning and 166.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49] - GenericResultAtLocation [Line: 91]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [91] - GenericResultAtLocation [Line: 196]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [196] - GenericResultAtLocation [Line: 562]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [562] - GenericResultAtLocation [Line: 571]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [571] - GenericResultAtLocation [Line: 606]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [606] - GenericResultAtLocation [Line: 671]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [671] - GenericResultAtLocation [Line: 779]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [779] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 567]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.9s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1581 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1539 mSDsluCounter, 4946 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3555 mSDsCounter, 450 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1809 IncrementalHoareTripleChecker+Invalid, 2259 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 450 mSolverCounterUnsat, 1391 mSDtfsCounter, 1809 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 489 GetRequests, 379 SyntacticMatches, 1 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 384 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=605occurred in iteration=9, InterpolantAutomatonStates: 90, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 42 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 1478 PreInvPairs, 1674 NumberOfFragments, 1392 HoareAnnotationTreeSize, 1478 FomulaSimplifications, 641 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 50 FomulaSimplificationsInter, 7919 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 925 NumberOfCodeBlocks, 925 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 912 ConstructedInterpolants, 0 QuantifiedInterpolants, 1561 SizeOfPredicates, 6 NumberOfNonLiveVariables, 798 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 185/212 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 894]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 563]: Loop Invariant Derived loop invariant: ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) && (!((1 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 583]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 597]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 590]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 617]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (methaneLevelCritical < 1)) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 607]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive)) && (tmp == 0))) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 == systemActive))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 756]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((1 <= \result) && (pumpRunning == 0)))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0)))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 902]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 983]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:05:36,278 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5579bd37-18f1-4ef7-a6fe-edb6f2013680/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE