./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8e8f57de68bd156f96d4553940231369dc2e0f8c550ee7a61d6446a6f476745 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:48:48,305 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:48:48,398 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:48:48,403 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:48:48,404 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:48:48,442 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:48:48,443 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:48:48,444 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:48:48,445 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:48:48,445 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:48:48,446 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:48:48,447 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:48:48,448 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:48:48,449 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:48:48,449 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:48:48,450 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:48:48,451 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:48:48,451 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:48:48,452 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:48:48,453 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:48:48,453 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:48:48,454 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:48:48,455 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:48:48,455 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:48:48,456 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:48:48,456 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:48:48,457 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:48:48,457 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:48:48,458 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:48,458 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:48:48,459 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:48:48,459 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:48:48,460 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:48:48,460 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:48:48,461 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:48:48,461 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:48:48,461 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:48:48,462 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:48:48,462 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:48:48,462 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8e8f57de68bd156f96d4553940231369dc2e0f8c550ee7a61d6446a6f476745 [2023-11-06 22:48:48,781 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:48:48,808 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:48:48,811 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:48:48,812 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:48:48,813 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:48:48,815 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c [2023-11-06 22:48:52,055 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:48:52,307 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:48:52,308 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c [2023-11-06 22:48:52,325 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/data/8a67c3fb8/ab6f69c4dc03475b9ab20772dff648f9/FLAGaacf1b13f [2023-11-06 22:48:52,347 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/data/8a67c3fb8/ab6f69c4dc03475b9ab20772dff648f9 [2023-11-06 22:48:52,354 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:48:52,356 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:48:52,361 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:52,361 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:48:52,366 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:48:52,369 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,370 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8d23dff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52, skipping insertion in model container [2023-11-06 22:48:52,370 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,444 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:48:52,749 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2023-11-06 22:48:52,814 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:52,827 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:48:52,837 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 22:48:52,839 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2023-11-06 22:48:52,840 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [521] [2023-11-06 22:48:52,840 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [530] [2023-11-06 22:48:52,841 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [571] [2023-11-06 22:48:52,841 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [679] [2023-11-06 22:48:52,842 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] [2023-11-06 22:48:52,842 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] [2023-11-06 22:48:52,906 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/sv-benchmarks/c/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2023-11-06 22:48:52,924 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:52,945 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:48:52,946 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52 WrapperNode [2023-11-06 22:48:52,946 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:52,947 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:52,947 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:48:52,948 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:48:52,955 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:52,981 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,010 INFO L138 Inliner]: procedures = 59, calls = 106, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 226 [2023-11-06 22:48:53,011 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:53,011 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:48:53,011 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:48:53,012 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:48:53,022 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,023 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,026 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,027 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,033 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,039 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,041 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,043 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,047 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:48:53,048 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:48:53,048 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:48:53,048 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:48:53,049 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (1/1) ... [2023-11-06 22:48:53,055 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:53,072 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:53,090 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:48:53,102 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:48:53,131 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:48:53,131 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:48:53,131 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:48:53,132 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:48:53,132 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:48:53,132 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:48:53,132 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:48:53,132 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:48:53,132 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:48:53,133 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:48:53,133 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:48:53,133 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:48:53,133 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:48:53,133 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:48:53,133 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:48:53,134 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:48:53,134 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:48:53,134 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:48:53,134 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:48:53,135 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:48:53,135 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:48:53,135 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:48:53,135 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:48:53,135 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:48:53,218 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:48:53,220 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:48:53,530 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:48:53,538 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:48:53,539 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:48:53,541 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:53 BoogieIcfgContainer [2023-11-06 22:48:53,541 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:48:53,544 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:48:53,545 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:48:53,548 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:48:53,549 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:48:52" (1/3) ... [2023-11-06 22:48:53,550 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1713bf0f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:53, skipping insertion in model container [2023-11-06 22:48:53,550 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:52" (2/3) ... [2023-11-06 22:48:53,550 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1713bf0f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:53, skipping insertion in model container [2023-11-06 22:48:53,550 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:53" (3/3) ... [2023-11-06 22:48:53,552 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product62.cil.c [2023-11-06 22:48:53,575 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:48:53,575 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:48:53,630 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:48:53,637 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3a6937d4, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:48:53,638 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:48:53,643 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 22:48:53,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:48:53,655 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:53,656 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:53,656 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:53,662 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:53,662 INFO L85 PathProgramCache]: Analyzing trace with hash -561821178, now seen corresponding path program 1 times [2023-11-06 22:48:53,673 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:53,673 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938537664] [2023-11-06 22:48:53,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:53,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:53,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:48:53,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:53,990 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:53,991 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:53,991 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938537664] [2023-11-06 22:48:53,992 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938537664] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:53,992 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:53,992 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:48:53,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [389072545] [2023-11-06 22:48:53,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:54,000 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:48:54,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:54,054 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:48:54,055 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:54,057 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:54,097 INFO L93 Difference]: Finished difference Result 213 states and 288 transitions. [2023-11-06 22:48:54,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:48:54,100 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:48:54,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:54,110 INFO L225 Difference]: With dead ends: 213 [2023-11-06 22:48:54,111 INFO L226 Difference]: Without dead ends: 102 [2023-11-06 22:48:54,115 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:54,119 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:54,121 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:54,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2023-11-06 22:48:54,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2023-11-06 22:48:54,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-06 22:48:54,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2023-11-06 22:48:54,200 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2023-11-06 22:48:54,200 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:54,200 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2023-11-06 22:48:54,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,201 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2023-11-06 22:48:54,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:48:54,204 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:54,204 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:54,205 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:48:54,205 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:54,206 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:54,206 INFO L85 PathProgramCache]: Analyzing trace with hash 1983272792, now seen corresponding path program 1 times [2023-11-06 22:48:54,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:54,206 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938735826] [2023-11-06 22:48:54,207 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:54,207 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:54,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:48:54,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:54,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:54,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938735826] [2023-11-06 22:48:54,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938735826] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:54,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:54,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:54,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1421569109] [2023-11-06 22:48:54,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:54,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:54,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:54,327 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:54,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:54,328 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:54,368 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2023-11-06 22:48:54,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:54,368 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:48:54,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:54,371 INFO L225 Difference]: With dead ends: 168 [2023-11-06 22:48:54,371 INFO L226 Difference]: Without dead ends: 93 [2023-11-06 22:48:54,372 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:54,374 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:54,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:54,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2023-11-06 22:48:54,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2023-11-06 22:48:54,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:48:54,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2023-11-06 22:48:54,391 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2023-11-06 22:48:54,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:54,392 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2023-11-06 22:48:54,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,392 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2023-11-06 22:48:54,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:48:54,394 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:54,394 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:54,395 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:48:54,395 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:54,395 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:54,396 INFO L85 PathProgramCache]: Analyzing trace with hash -452039463, now seen corresponding path program 1 times [2023-11-06 22:48:54,396 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:54,396 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [209472193] [2023-11-06 22:48:54,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:54,397 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:54,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:54,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:54,554 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:54,555 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [209472193] [2023-11-06 22:48:54,555 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [209472193] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:54,555 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:54,555 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:54,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166096210] [2023-11-06 22:48:54,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:54,556 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:54,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:54,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:54,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:54,564 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:54,689 INFO L93 Difference]: Finished difference Result 178 states and 233 transitions. [2023-11-06 22:48:54,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:48:54,694 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:48:54,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:54,696 INFO L225 Difference]: With dead ends: 178 [2023-11-06 22:48:54,697 INFO L226 Difference]: Without dead ends: 93 [2023-11-06 22:48:54,698 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:48:54,700 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 147 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:54,700 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 305 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:54,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2023-11-06 22:48:54,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2023-11-06 22:48:54,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:48:54,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2023-11-06 22:48:54,742 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2023-11-06 22:48:54,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:54,742 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2023-11-06 22:48:54,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:54,743 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2023-11-06 22:48:54,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:48:54,745 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:54,745 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:54,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:48:54,746 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:54,747 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:54,747 INFO L85 PathProgramCache]: Analyzing trace with hash -1529000788, now seen corresponding path program 1 times [2023-11-06 22:48:54,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:54,747 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165482812] [2023-11-06 22:48:54,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:54,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:54,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:54,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:54,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:54,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-06 22:48:54,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:54,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:54,906 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:54,906 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165482812] [2023-11-06 22:48:54,907 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165482812] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:54,907 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:54,907 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:54,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [850684709] [2023-11-06 22:48:54,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:54,908 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:54,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:54,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:54,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:54,910 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:48:55,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:55,224 INFO L93 Difference]: Finished difference Result 267 states and 341 transitions. [2023-11-06 22:48:55,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:55,225 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2023-11-06 22:48:55,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:55,228 INFO L225 Difference]: With dead ends: 267 [2023-11-06 22:48:55,228 INFO L226 Difference]: Without dead ends: 182 [2023-11-06 22:48:55,230 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:48:55,231 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 227 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:55,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 315 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:55,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-06 22:48:55,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 176. [2023-11-06 22:48:55,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 130 states have (on average 1.2538461538461538) internal successors, (163), 139 states have internal predecessors, (163), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:48:55,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 214 transitions. [2023-11-06 22:48:55,265 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 214 transitions. Word has length 46 [2023-11-06 22:48:55,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:55,301 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 214 transitions. [2023-11-06 22:48:55,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:48:55,301 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 214 transitions. [2023-11-06 22:48:55,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:48:55,303 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:55,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:55,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:48:55,304 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:55,305 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:55,305 INFO L85 PathProgramCache]: Analyzing trace with hash -821652620, now seen corresponding path program 1 times [2023-11-06 22:48:55,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:55,305 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1483874682] [2023-11-06 22:48:55,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:55,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:55,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:55,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:55,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:55,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-06 22:48:55,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:55,498 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:55,499 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1483874682] [2023-11-06 22:48:55,499 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1483874682] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:55,499 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:55,499 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:55,500 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [991311424] [2023-11-06 22:48:55,500 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:55,500 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:55,501 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:55,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:55,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:55,502 INFO L87 Difference]: Start difference. First operand 176 states and 214 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:55,833 INFO L93 Difference]: Finished difference Result 352 states and 429 transitions. [2023-11-06 22:48:55,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:48:55,834 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2023-11-06 22:48:55,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:55,836 INFO L225 Difference]: With dead ends: 352 [2023-11-06 22:48:55,836 INFO L226 Difference]: Without dead ends: 184 [2023-11-06 22:48:55,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:48:55,839 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 152 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 190 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 158 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:55,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [158 Valid, 422 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 190 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:55,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2023-11-06 22:48:55,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 174. [2023-11-06 22:48:55,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2265625) internal successors, (157), 137 states have internal predecessors, (157), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:48:55,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 208 transitions. [2023-11-06 22:48:55,867 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 208 transitions. Word has length 52 [2023-11-06 22:48:55,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:55,868 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 208 transitions. [2023-11-06 22:48:55,868 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:55,868 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 208 transitions. [2023-11-06 22:48:55,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-11-06 22:48:55,870 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:55,871 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:55,871 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:48:55,871 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:55,871 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:55,872 INFO L85 PathProgramCache]: Analyzing trace with hash 1197221374, now seen corresponding path program 1 times [2023-11-06 22:48:55,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:55,872 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813005012] [2023-11-06 22:48:55,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:55,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:55,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:55,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:55,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:56,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:56,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:56,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:48:56,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,084 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:56,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:56,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813005012] [2023-11-06 22:48:56,085 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813005012] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:56,085 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:56,085 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:56,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1972398222] [2023-11-06 22:48:56,086 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:56,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:56,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:56,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:56,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:56,089 INFO L87 Difference]: Start difference. First operand 174 states and 208 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:56,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:56,339 INFO L93 Difference]: Finished difference Result 350 states and 427 transitions. [2023-11-06 22:48:56,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:56,340 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2023-11-06 22:48:56,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:56,343 INFO L225 Difference]: With dead ends: 350 [2023-11-06 22:48:56,343 INFO L226 Difference]: Without dead ends: 184 [2023-11-06 22:48:56,345 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:48:56,352 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 76 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:56,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 415 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:56,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2023-11-06 22:48:56,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 177. [2023-11-06 22:48:56,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.2213740458015268) internal successors, (160), 140 states have internal predecessors, (160), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:48:56,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 211 transitions. [2023-11-06 22:48:56,387 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 211 transitions. Word has length 62 [2023-11-06 22:48:56,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:56,391 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 211 transitions. [2023-11-06 22:48:56,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:56,391 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 211 transitions. [2023-11-06 22:48:56,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-11-06 22:48:56,394 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:56,394 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:56,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:48:56,394 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:56,395 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:56,395 INFO L85 PathProgramCache]: Analyzing trace with hash 1124834816, now seen corresponding path program 1 times [2023-11-06 22:48:56,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:56,396 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399544626] [2023-11-06 22:48:56,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:56,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:56,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:56,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:56,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:56,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:56,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:48:56,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,574 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:56,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:56,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399544626] [2023-11-06 22:48:56,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399544626] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:56,575 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:56,575 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:48:56,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18761232] [2023-11-06 22:48:56,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:56,580 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:48:56,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:56,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:48:56,581 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:48:56,582 INFO L87 Difference]: Start difference. First operand 177 states and 211 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:56,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:56,832 INFO L93 Difference]: Finished difference Result 356 states and 433 transitions. [2023-11-06 22:48:56,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:56,833 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2023-11-06 22:48:56,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:56,835 INFO L225 Difference]: With dead ends: 356 [2023-11-06 22:48:56,835 INFO L226 Difference]: Without dead ends: 187 [2023-11-06 22:48:56,836 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:48:56,837 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 113 mSDsluCounter, 368 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:56,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 464 Invalid, 229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:56,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2023-11-06 22:48:56,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 179. [2023-11-06 22:48:56,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.218045112781955) internal successors, (162), 142 states have internal predecessors, (162), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:48:56,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 213 transitions. [2023-11-06 22:48:56,864 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 213 transitions. Word has length 62 [2023-11-06 22:48:56,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:56,865 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 213 transitions. [2023-11-06 22:48:56,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:56,865 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 213 transitions. [2023-11-06 22:48:56,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-11-06 22:48:56,866 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:56,867 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:56,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:48:56,867 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:56,868 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:56,868 INFO L85 PathProgramCache]: Analyzing trace with hash 280829314, now seen corresponding path program 1 times [2023-11-06 22:48:56,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:56,868 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [265029435] [2023-11-06 22:48:56,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:56,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:56,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:48:56,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:56,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:56,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:57,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:57,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:48:57,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,014 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:57,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:57,014 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [265029435] [2023-11-06 22:48:57,014 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [265029435] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:57,015 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:57,015 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:57,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1120159050] [2023-11-06 22:48:57,015 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:57,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:57,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:57,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:57,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:57,018 INFO L87 Difference]: Start difference. First operand 179 states and 213 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:48:57,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:57,313 INFO L93 Difference]: Finished difference Result 477 states and 597 transitions. [2023-11-06 22:48:57,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:57,314 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2023-11-06 22:48:57,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:57,317 INFO L225 Difference]: With dead ends: 477 [2023-11-06 22:48:57,317 INFO L226 Difference]: Without dead ends: 306 [2023-11-06 22:48:57,318 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:48:57,319 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 225 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 333 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:57,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [233 Valid, 333 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:57,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2023-11-06 22:48:57,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 304. [2023-11-06 22:48:57,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 226 states have (on average 1.2079646017699115) internal successors, (273), 239 states have internal predecessors, (273), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2023-11-06 22:48:57,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 370 transitions. [2023-11-06 22:48:57,368 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 370 transitions. Word has length 62 [2023-11-06 22:48:57,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:57,369 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 370 transitions. [2023-11-06 22:48:57,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:48:57,369 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 370 transitions. [2023-11-06 22:48:57,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2023-11-06 22:48:57,371 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:57,371 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:57,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:48:57,371 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:57,372 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:57,372 INFO L85 PathProgramCache]: Analyzing trace with hash 135373532, now seen corresponding path program 1 times [2023-11-06 22:48:57,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:57,372 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998572269] [2023-11-06 22:48:57,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:57,372 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:57,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:48:57,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:48:57,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:57,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:57,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:57,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-06 22:48:57,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:57,657 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:57,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:57,657 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998572269] [2023-11-06 22:48:57,657 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998572269] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:57,658 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:57,658 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 22:48:57,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [903754340] [2023-11-06 22:48:57,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:57,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:48:57,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:57,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:48:57,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:48:57,660 INFO L87 Difference]: Start difference. First operand 304 states and 370 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:48:58,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:58,730 INFO L93 Difference]: Finished difference Result 920 states and 1159 transitions. [2023-11-06 22:48:58,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:48:58,731 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2023-11-06 22:48:58,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:58,736 INFO L225 Difference]: With dead ends: 920 [2023-11-06 22:48:58,737 INFO L226 Difference]: Without dead ends: 624 [2023-11-06 22:48:58,739 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-06 22:48:58,740 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 367 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 792 mSolverCounterSat, 141 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 374 SdHoareTripleChecker+Valid, 528 SdHoareTripleChecker+Invalid, 933 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 141 IncrementalHoareTripleChecker+Valid, 792 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:58,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [374 Valid, 528 Invalid, 933 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [141 Valid, 792 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-06 22:48:58,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 624 states. [2023-11-06 22:48:58,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 624 to 615. [2023-11-06 22:48:58,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 615 states, 450 states have (on average 1.18) internal successors, (531), 480 states have internal predecessors, (531), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2023-11-06 22:48:58,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 615 states and 752 transitions. [2023-11-06 22:48:58,860 INFO L78 Accepts]: Start accepts. Automaton has 615 states and 752 transitions. Word has length 66 [2023-11-06 22:48:58,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:58,860 INFO L495 AbstractCegarLoop]: Abstraction has 615 states and 752 transitions. [2023-11-06 22:48:58,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:48:58,861 INFO L276 IsEmpty]: Start isEmpty. Operand 615 states and 752 transitions. [2023-11-06 22:48:58,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2023-11-06 22:48:58,870 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:58,870 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:58,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:48:58,870 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:58,871 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:58,871 INFO L85 PathProgramCache]: Analyzing trace with hash -473757932, now seen corresponding path program 1 times [2023-11-06 22:48:58,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:58,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431704599] [2023-11-06 22:48:58,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:58,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:58,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:48:59,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:48:59,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:48:59,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:48:59,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:59,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:59,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:59,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:48:59,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2023-11-06 22:48:59,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-06 22:48:59,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:48:59,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-06 22:48:59,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:48:59,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:59,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2023-11-06 22:48:59,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,317 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 19 proven. 15 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-06 22:48:59,318 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:59,318 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431704599] [2023-11-06 22:48:59,318 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431704599] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:48:59,318 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1850589876] [2023-11-06 22:48:59,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:59,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:48:59,319 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:59,324 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:48:59,336 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:48:59,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:59,479 INFO L262 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:48:59,489 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:48:59,778 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:48:59,778 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:48:59,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1850589876] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:59,779 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:48:59,779 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [16] total 21 [2023-11-06 22:48:59,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078699736] [2023-11-06 22:48:59,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:59,780 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:48:59,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:59,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:48:59,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:48:59,782 INFO L87 Difference]: Start difference. First operand 615 states and 752 transitions. Second operand has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:49:00,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:49:00,025 INFO L93 Difference]: Finished difference Result 1222 states and 1496 transitions. [2023-11-06 22:49:00,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:49:00,026 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 129 [2023-11-06 22:49:00,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:49:00,030 INFO L225 Difference]: With dead ends: 1222 [2023-11-06 22:49:00,030 INFO L226 Difference]: Without dead ends: 615 [2023-11-06 22:49:00,033 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:49:00,034 INFO L413 NwaCegarLoop]: 213 mSDtfsCounter, 75 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 680 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:49:00,035 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 680 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:49:00,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615 states. [2023-11-06 22:49:00,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615 to 615. [2023-11-06 22:49:00,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 615 states, 450 states have (on average 1.1666666666666667) internal successors, (525), 480 states have internal predecessors, (525), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (122), 86 states have call predecessors, (122), 86 states have call successors, (122) [2023-11-06 22:49:00,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 615 states and 733 transitions. [2023-11-06 22:49:00,133 INFO L78 Accepts]: Start accepts. Automaton has 615 states and 733 transitions. Word has length 129 [2023-11-06 22:49:00,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:49:00,134 INFO L495 AbstractCegarLoop]: Abstraction has 615 states and 733 transitions. [2023-11-06 22:49:00,134 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:49:00,135 INFO L276 IsEmpty]: Start isEmpty. Operand 615 states and 733 transitions. [2023-11-06 22:49:00,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2023-11-06 22:49:00,138 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:49:00,141 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:49:00,147 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-06 22:49:00,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:49:00,347 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:49:00,347 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:49:00,347 INFO L85 PathProgramCache]: Analyzing trace with hash -165520112, now seen corresponding path program 1 times [2023-11-06 22:49:00,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:49:00,347 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [481338249] [2023-11-06 22:49:00,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:49:00,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:49:00,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:49:00,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:49:00,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:49:00,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:49:00,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:49:00,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:49:00,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:49:00,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 22:49:00,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2023-11-06 22:49:00,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:49:00,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-06 22:49:00,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:49:00,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:49:00,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2023-11-06 22:49:00,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,772 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-11-06 22:49:00,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:49:00,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [481338249] [2023-11-06 22:49:00,773 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [481338249] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:49:00,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [505766027] [2023-11-06 22:49:00,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:49:00,774 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:49:00,774 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:49:00,777 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:49:00,785 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:49:00,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:49:00,908 INFO L262 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:49:00,914 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:49:01,087 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:49:01,087 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:49:01,088 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [505766027] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:49:01,088 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:49:01,088 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2023-11-06 22:49:01,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496592838] [2023-11-06 22:49:01,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:49:01,090 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:49:01,090 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:49:01,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:49:01,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:49:01,091 INFO L87 Difference]: Start difference. First operand 615 states and 733 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:49:01,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:49:01,296 INFO L93 Difference]: Finished difference Result 1048 states and 1264 transitions. [2023-11-06 22:49:01,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:49:01,296 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2023-11-06 22:49:01,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:49:01,298 INFO L225 Difference]: With dead ends: 1048 [2023-11-06 22:49:01,298 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:49:01,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:49:01,303 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 63 mSDsluCounter, 760 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 951 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:49:01,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 951 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:49:01,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:49:01,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:49:01,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:49:01,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:49:01,305 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2023-11-06 22:49:01,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:49:01,305 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:49:01,305 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:49:01,305 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:49:01,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:49:01,308 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:49:01,320 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:49:01,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:49:01,517 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:49:05,304 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 922 929) no Hoare annotation was computed. [2023-11-06 22:49:05,305 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 922 929) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:05,305 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 922 929) no Hoare annotation was computed. [2023-11-06 22:49:05,305 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 812 818) no Hoare annotation was computed. [2023-11-06 22:49:05,305 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 812 818) the Hoare annotation is: true [2023-11-06 22:49:05,305 INFO L895 garLoopResultBuilder]: At program point L865(line 865) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse3 .cse2) (or .cse1 .cse3 .cse2))) [2023-11-06 22:49:05,306 INFO L899 garLoopResultBuilder]: For program point L865-1(lines 846 870) no Hoare annotation was computed. [2023-11-06 22:49:05,306 INFO L899 garLoopResultBuilder]: For program point L1014(lines 1014 1018) no Hoare annotation was computed. [2023-11-06 22:49:05,306 INFO L899 garLoopResultBuilder]: For program point L1014-2(lines 1014 1018) no Hoare annotation was computed. [2023-11-06 22:49:05,306 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 670 678) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:49:05,306 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 846 870) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:49:05,306 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 1005 1023) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:49:05,306 INFO L895 garLoopResultBuilder]: At program point L860(line 860) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:49:05,307 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:49:05,307 INFO L899 garLoopResultBuilder]: For program point L854(lines 854 862) no Hoare annotation was computed. [2023-11-06 22:49:05,307 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 867) no Hoare annotation was computed. [2023-11-06 22:49:05,307 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 846 870) no Hoare annotation was computed. [2023-11-06 22:49:05,307 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2023-11-06 22:49:05,307 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 603 614) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) (< |old(~methaneLevelCritical~0)| 1) .cse0) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-06 22:49:05,307 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2023-11-06 22:49:05,307 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 615 623) the Hoare annotation is: true [2023-11-06 22:49:05,308 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 615 623) no Hoare annotation was computed. [2023-11-06 22:49:05,308 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 615 623) no Hoare annotation was computed. [2023-11-06 22:49:05,308 INFO L899 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2023-11-06 22:49:05,308 INFO L895 garLoopResultBuilder]: At program point L886(line 886) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (< ~methaneLevelCritical~0 1)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:49:05,308 INFO L895 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) .cse1 .cse2) (or (and .cse0 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse3 .cse1 .cse2))) [2023-11-06 22:49:05,308 INFO L895 garLoopResultBuilder]: At program point L878(line 878) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2023-11-06 22:49:05,308 INFO L899 garLoopResultBuilder]: For program point L878-1(line 878) no Hoare annotation was computed. [2023-11-06 22:49:05,309 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 788 811) no Hoare annotation was computed. [2023-11-06 22:49:05,309 INFO L895 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse5 .cse3)) (.cse2 (and .cse1 .cse5)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse3) .cse4) (or .cse0 .cse2 .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:05,309 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2023-11-06 22:49:05,309 INFO L895 garLoopResultBuilder]: At program point L891(line 891) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:05,309 INFO L895 garLoopResultBuilder]: At program point L891-1(lines 872 896) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse4)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (and .cse2 .cse0) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse1) .cse3) (or (and .cse0 .cse4 .cse1) (and .cse2 .cse0 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) .cse3 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:05,309 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 791 810) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L899 garLoopResultBuilder]: For program point L880(lines 880 888) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 893) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 564) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 522 529) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:49:05,310 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 788 811) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:05,310 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L899 garLoopResultBuilder]: For program point L550(lines 550 567) no Hoare annotation was computed. [2023-11-06 22:49:05,310 INFO L895 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2023-11-06 22:49:05,311 INFO L895 garLoopResultBuilder]: At program point L550-1(lines 542 570) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 0 ~systemActive~0))) (let ((.cse4 (not .cse5)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not .cse2))) (and (or (and .cse0 .cse1) (and .cse1 .cse2 .cse3 .cse4) .cse5 (< ~methaneLevelCritical~0 1)) (let ((.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~4#1| 0))) (or (and .cse1 .cse6 .cse2 .cse3 .cse4) (not (= ~methaneLevelCritical~0 0)) (and .cse0 .cse1 .cse6) (and (<= 2 ~waterLevel~0) .cse6 .cse3) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse6) .cse5))))) [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point L555(lines 555 561) no Hoare annotation was computed. [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 788 811) no Hoare annotation was computed. [2023-11-06 22:49:05,311 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 941 949) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) .cse2 (< ~methaneLevelCritical~0 1))) (or (not (= ~methaneLevelCritical~0 0)) .cse2))) [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2023-11-06 22:49:05,311 INFO L902 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2023-11-06 22:49:05,311 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2023-11-06 22:49:05,312 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2023-11-06 22:49:05,312 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2023-11-06 22:49:05,312 INFO L899 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2023-11-06 22:49:05,312 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2023-11-06 22:49:05,312 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 418 447) the Hoare annotation is: true [2023-11-06 22:49:05,312 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2023-11-06 22:49:05,312 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2023-11-06 22:49:05,312 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 1024 1031) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:49:05,312 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 484 494) the Hoare annotation is: true [2023-11-06 22:49:05,312 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2023-11-06 22:49:05,313 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 691 697) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:49:05,313 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 746 752) no Hoare annotation was computed. [2023-11-06 22:49:05,313 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 498 520) the Hoare annotation is: true [2023-11-06 22:49:05,313 INFO L895 garLoopResultBuilder]: At program point L771(lines 726 773) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:49:05,313 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:49:05,313 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:49:05,313 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:49:05,313 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:49:05,313 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L895 garLoopResultBuilder]: At program point L764-2(lines 756 769) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L895 garLoopResultBuilder]: At program point L748(line 748) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:49:05,314 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:49:05,314 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 698 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:49:05,315 INFO L902 garLoopResultBuilder]: At program point L777(lines 716 781) the Hoare annotation is: true [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2023-11-06 22:49:05,315 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 534 541) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2023-11-06 22:49:05,315 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 705 713) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:49:05,315 INFO L895 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: false [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L995-2(lines 995 999) no Hoare annotation was computed. [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L828(lines 828 836) no Hoare annotation was computed. [2023-11-06 22:49:05,315 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 841) no Hoare annotation was computed. [2023-11-06 22:49:05,316 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 820 844) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-06 22:49:05,318 INFO L895 garLoopResultBuilder]: At program point L839(line 839) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-06 22:49:05,318 INFO L899 garLoopResultBuilder]: For program point L839-1(lines 820 844) no Hoare annotation was computed. [2023-11-06 22:49:05,318 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 656 669) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and .cse5 (<= 2 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1) .cse3) (or .cse0 .cse4 .cse2) (or .cse4 .cse1 .cse2 .cse3)))) [2023-11-06 22:49:05,319 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 986 1004) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse1 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) (and .cse0 .cse1 .cse2) .cse3 .cse4) (or (not .cse2) .cse3 (and .cse0 .cse1) .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:49:05,319 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 820 844) no Hoare annotation was computed. [2023-11-06 22:49:05,319 INFO L899 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2023-11-06 22:49:05,319 INFO L899 garLoopResultBuilder]: For program point L912(lines 912 918) no Hoare annotation was computed. [2023-11-06 22:49:05,319 INFO L895 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0))) (and (or (not .cse0) (and .cse1 .cse2) .cse3 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse0) .cse3))) [2023-11-06 22:49:05,319 INFO L895 garLoopResultBuilder]: At program point L912-2(lines 905 921) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or (not .cse0) (and (= ~pumpRunning~0 0) .cse3 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~9#1|)) .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:49:05,320 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2023-11-06 22:49:05,320 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 897 904) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (not .cse0) .cse2 (< ~methaneLevelCritical~0 1)) (or (<= 2 ~waterLevel~0) .cse1 .cse2))) [2023-11-06 22:49:05,320 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 999) no Hoare annotation was computed. [2023-11-06 22:49:05,320 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (let ((.cse2 (and (= ~pumpRunning~0 0) .cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (not .cse1)))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2)))) [2023-11-06 22:49:05,320 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2023-11-06 22:49:05,321 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 591 602) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2023-11-06 22:49:05,321 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2023-11-06 22:49:05,321 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 930 940) no Hoare annotation was computed. [2023-11-06 22:49:05,321 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 930 940) the Hoare annotation is: true [2023-11-06 22:49:05,321 INFO L902 garLoopResultBuilder]: At program point L935(line 935) the Hoare annotation is: true [2023-11-06 22:49:05,321 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 930 940) no Hoare annotation was computed. [2023-11-06 22:49:05,322 INFO L899 garLoopResultBuilder]: For program point L935-1(line 935) no Hoare annotation was computed. [2023-11-06 22:49:05,324 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:49:05,326 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:49:05,356 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:49:05 BoogieIcfgContainer [2023-11-06 22:49:05,356 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:49:05,357 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:49:05,357 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:49:05,357 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:49:05,358 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:53" (3/4) ... [2023-11-06 22:49:05,360 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:49:05,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:49:05,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:49:05,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:49:05,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:49:05,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:49:05,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:49:05,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:49:05,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:49:05,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:49:05,366 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:49:05,374 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2023-11-06 22:49:05,375 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:49:05,376 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:49:05,376 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:49:05,377 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:49:05,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:49:05,407 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,407 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,408 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) || ((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,409 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 <= methaneLevelCritical) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:49:05,409 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:49:05,410 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,410 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,410 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,410 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0))) && (((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:49:05,411 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,411 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,473 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,473 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,473 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:49:05,473 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:49:05,474 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,474 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,475 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) || ((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,475 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 <= methaneLevelCritical) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:49:05,475 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) [2023-11-06 22:49:05,476 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,476 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,476 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,476 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0))) && (((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0)))) [2023-11-06 22:49:05,477 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) [2023-11-06 22:49:05,477 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:49:05,494 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:49:05,494 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:49:05,495 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:49:05,495 INFO L158 Benchmark]: Toolchain (without parser) took 13139.39ms. Allocated memory was 109.1MB in the beginning and 222.3MB in the end (delta: 113.2MB). Free memory was 47.0MB in the beginning and 150.9MB in the end (delta: -104.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,496 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 109.1MB. Free memory was 74.2MB in the beginning and 74.1MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:49:05,496 INFO L158 Benchmark]: CACSL2BoogieTranslator took 585.76ms. Allocated memory was 109.1MB in the beginning and 151.0MB in the end (delta: 41.9MB). Free memory was 46.8MB in the beginning and 113.3MB in the end (delta: -66.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,497 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.45ms. Allocated memory is still 151.0MB. Free memory was 113.3MB in the beginning and 110.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,497 INFO L158 Benchmark]: Boogie Preprocessor took 35.68ms. Allocated memory is still 151.0MB. Free memory was 110.7MB in the beginning and 109.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,498 INFO L158 Benchmark]: RCFGBuilder took 493.97ms. Allocated memory is still 151.0MB. Free memory was 109.1MB in the beginning and 90.8MB in the end (delta: 18.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,498 INFO L158 Benchmark]: TraceAbstraction took 11812.05ms. Allocated memory was 151.0MB in the beginning and 222.3MB in the end (delta: 71.3MB). Free memory was 90.2MB in the beginning and 158.2MB in the end (delta: -68.0MB). Peak memory consumption was 100.4MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,498 INFO L158 Benchmark]: Witness Printer took 137.96ms. Allocated memory is still 222.3MB. Free memory was 158.2MB in the beginning and 150.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:49:05,501 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 109.1MB. Free memory was 74.2MB in the beginning and 74.1MB in the end (delta: 146.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 585.76ms. Allocated memory was 109.1MB in the beginning and 151.0MB in the end (delta: 41.9MB). Free memory was 46.8MB in the beginning and 113.3MB in the end (delta: -66.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.45ms. Allocated memory is still 151.0MB. Free memory was 113.3MB in the beginning and 110.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.68ms. Allocated memory is still 151.0MB. Free memory was 110.7MB in the beginning and 109.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 493.97ms. Allocated memory is still 151.0MB. Free memory was 109.1MB in the beginning and 90.8MB in the end (delta: 18.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11812.05ms. Allocated memory was 151.0MB in the beginning and 222.3MB in the end (delta: 71.3MB). Free memory was 90.2MB in the beginning and 158.2MB in the end (delta: -68.0MB). Peak memory consumption was 100.4MB. Max. memory is 16.1GB. * Witness Printer took 137.96ms. Allocated memory is still 222.3MB. Free memory was 158.2MB in the beginning and 150.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [521] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [530] - GenericResultAtLocation [Line: 571]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [571] - GenericResultAtLocation [Line: 679]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [679] - GenericResultAtLocation [Line: 714]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] - GenericResultAtLocation [Line: 782]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.7s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1500 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1458 mSDsluCounter, 4775 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3369 mSDsCounter, 389 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1953 IncrementalHoareTripleChecker+Invalid, 2342 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 389 mSolverCounterUnsat, 1406 mSDtfsCounter, 1953 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 509 GetRequests, 393 SyntacticMatches, 1 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 365 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=615occurred in iteration=9, InterpolantAutomatonStates: 94, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 42 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1479 PreInvPairs, 1685 NumberOfFragments, 1375 HoareAnnotationTreeSize, 1479 FomulaSimplifications, 645 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 51 FomulaSimplificationsInter, 8465 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 940 NumberOfCodeBlocks, 940 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 927 ConstructedInterpolants, 0 QuantifiedInterpolants, 1505 SizeOfPredicates, 6 NumberOfNonLiveVariables, 810 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 198/216 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: ((((((1 <= methaneLevelCritical) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: (((0 == systemActive) || (methaneLevelCritical < 1)) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && (((2 <= waterLevel) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical == tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) || ((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0)))) || (!((\old(pumpRunning) == 0)) && (pumpRunning == 0))) || !((methaneLevelCritical == 0))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (1 <= tmp))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (methaneLevelCritical < 1))) && (((pumpRunning == \old(pumpRunning)) || !((methaneLevelCritical == 0))) || (0 == systemActive))) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (\result == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && (!((methaneLevelCritical == 0)) || (0 == systemActive))) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || ((1 <= \result) && (pumpRunning == 0))) && (((\old(pumpRunning) == 0) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0)))) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((methaneLevelCritical == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) || ((((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((((((pumpRunning == 0) && (tmp == 0)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))) || !((methaneLevelCritical == 0))) || ((!((\old(pumpRunning) == 0)) && (pumpRunning == 0)) && (tmp == 0))) || (((2 <= waterLevel) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && !((\old(pumpRunning) == 0))) && (tmp == 0))) || (0 == systemActive))) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!((methaneLevelCritical == 0)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:49:05,552 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4bdea475-0afe-4b08-994b-6d414124ad40/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE