./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68cd47586ea836a40d34f69dc7bca714ffc0af5c5bf2f7fbd8cfbbd6f1019685 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:31:03,107 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:31:03,228 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:31:03,237 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:31:03,239 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:31:03,270 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:31:03,271 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:31:03,272 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:31:03,273 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:31:03,278 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:31:03,280 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:31:03,281 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:31:03,281 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:31:03,283 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:31:03,284 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:31:03,284 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:31:03,285 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:31:03,285 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:31:03,286 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:31:03,286 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:31:03,287 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:31:03,287 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:31:03,288 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:31:03,288 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:31:03,289 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:31:03,290 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:31:03,290 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:31:03,291 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:31:03,291 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:31:03,292 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:31:03,293 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:31:03,294 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:31:03,294 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:31:03,294 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:31:03,295 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:31:03,295 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:31:03,295 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:31:03,296 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:31:03,296 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:31:03,296 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68cd47586ea836a40d34f69dc7bca714ffc0af5c5bf2f7fbd8cfbbd6f1019685 [2023-11-06 22:31:03,607 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:31:03,646 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:31:03,649 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:31:03,651 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:31:03,651 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:31:03,653 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c [2023-11-06 22:31:06,756 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:31:07,060 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:31:07,061 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c [2023-11-06 22:31:07,079 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/data/163741fb3/2346f0f2b85d407a90073c4a975f3620/FLAG14ad367ba [2023-11-06 22:31:07,094 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/data/163741fb3/2346f0f2b85d407a90073c4a975f3620 [2023-11-06 22:31:07,101 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:31:07,102 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:31:07,107 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:31:07,108 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:31:07,113 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:31:07,116 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,117 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ac61c5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07, skipping insertion in model container [2023-11-06 22:31:07,118 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,188 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:31:07,455 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c[9171,9184] [2023-11-06 22:31:07,508 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:31:07,520 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:31:07,530 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-06 22:31:07,532 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [87] [2023-11-06 22:31:07,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [116] [2023-11-06 22:31:07,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [188] [2023-11-06 22:31:07,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [426] [2023-11-06 22:31:07,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [522] [2023-11-06 22:31:07,534 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [625] [2023-11-06 22:31:07,534 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] [2023-11-06 22:31:07,560 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/sv-benchmarks/c/product-lines/minepump_spec4_product59.cil.c[9171,9184] [2023-11-06 22:31:07,593 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:31:07,613 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:31:07,613 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07 WrapperNode [2023-11-06 22:31:07,614 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:31:07,615 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:31:07,615 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:31:07,615 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:31:07,623 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,638 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,683 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 230 [2023-11-06 22:31:07,692 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:31:07,693 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:31:07,694 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:31:07,694 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:31:07,705 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,705 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,716 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,717 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,736 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,742 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,743 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,745 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,748 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:31:07,757 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:31:07,757 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:31:07,757 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:31:07,758 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (1/1) ... [2023-11-06 22:31:07,776 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:31:07,789 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:31:07,803 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:31:07,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:31:07,851 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:31:07,851 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:31:07,851 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:31:07,852 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:31:07,852 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:31:07,852 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:31:07,852 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:31:07,852 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:31:07,852 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:31:07,853 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:31:07,853 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:31:07,853 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:31:07,853 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:31:07,853 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:31:07,853 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:31:07,853 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:31:07,854 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:31:07,854 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:31:07,932 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:31:07,934 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:31:08,398 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:31:08,405 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:31:08,406 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:31:08,408 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:31:08 BoogieIcfgContainer [2023-11-06 22:31:08,408 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:31:08,411 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:31:08,411 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:31:08,421 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:31:08,421 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:31:07" (1/3) ... [2023-11-06 22:31:08,422 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f3c5cc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:31:08, skipping insertion in model container [2023-11-06 22:31:08,422 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:31:07" (2/3) ... [2023-11-06 22:31:08,423 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f3c5cc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:31:08, skipping insertion in model container [2023-11-06 22:31:08,423 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:31:08" (3/3) ... [2023-11-06 22:31:08,424 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product59.cil.c [2023-11-06 22:31:08,442 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:31:08,442 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:31:08,502 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:31:08,509 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50bb2b17, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:31:08,509 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:31:08,514 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:31:08,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:31:08,524 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:08,525 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:08,526 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:08,531 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:08,532 INFO L85 PathProgramCache]: Analyzing trace with hash -1328460563, now seen corresponding path program 1 times [2023-11-06 22:31:08,542 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:08,542 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280433504] [2023-11-06 22:31:08,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:08,543 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:08,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:08,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:08,763 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:08,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280433504] [2023-11-06 22:31:08,764 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280433504] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:08,765 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:08,765 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:31:08,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584404397] [2023-11-06 22:31:08,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:08,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:31:08,773 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:08,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:31:08,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:31:08,808 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:08,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:08,854 INFO L93 Difference]: Finished difference Result 178 states and 243 transitions. [2023-11-06 22:31:08,855 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:31:08,856 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:31:08,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:08,866 INFO L225 Difference]: With dead ends: 178 [2023-11-06 22:31:08,867 INFO L226 Difference]: Without dead ends: 84 [2023-11-06 22:31:08,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:31:08,875 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:08,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:31:08,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-06 22:31:08,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2023-11-06 22:31:08,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 73 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:31:08,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2023-11-06 22:31:08,955 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 19 [2023-11-06 22:31:08,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:08,956 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2023-11-06 22:31:08,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:08,957 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2023-11-06 22:31:08,960 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:31:08,963 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:08,963 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:08,964 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:31:08,965 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:08,966 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:08,966 INFO L85 PathProgramCache]: Analyzing trace with hash 1880549764, now seen corresponding path program 1 times [2023-11-06 22:31:08,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:08,967 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560570870] [2023-11-06 22:31:08,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:08,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:09,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:09,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:09,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:09,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560570870] [2023-11-06 22:31:09,153 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560570870] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:09,153 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:09,153 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:31:09,154 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127080463] [2023-11-06 22:31:09,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:09,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:31:09,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:09,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:31:09,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:31:09,159 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:09,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:09,201 INFO L93 Difference]: Finished difference Result 130 states and 168 transitions. [2023-11-06 22:31:09,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:31:09,202 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:31:09,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:09,204 INFO L225 Difference]: With dead ends: 130 [2023-11-06 22:31:09,204 INFO L226 Difference]: Without dead ends: 75 [2023-11-06 22:31:09,206 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:31:09,207 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 16 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:09,208 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 171 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:31:09,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-06 22:31:09,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-06 22:31:09,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:31:09,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2023-11-06 22:31:09,222 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 20 [2023-11-06 22:31:09,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:09,223 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2023-11-06 22:31:09,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:09,223 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2023-11-06 22:31:09,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:31:09,228 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:09,229 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:09,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:31:09,229 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:09,230 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:09,230 INFO L85 PathProgramCache]: Analyzing trace with hash 612415945, now seen corresponding path program 1 times [2023-11-06 22:31:09,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:09,231 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185983918] [2023-11-06 22:31:09,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:09,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:09,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:09,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:09,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:09,484 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185983918] [2023-11-06 22:31:09,484 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185983918] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:09,484 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:09,485 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:31:09,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1698994176] [2023-11-06 22:31:09,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:09,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:31:09,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:09,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:31:09,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:31:09,487 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:09,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:09,758 INFO L93 Difference]: Finished difference Result 248 states and 328 transitions. [2023-11-06 22:31:09,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:31:09,764 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-06 22:31:09,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:09,770 INFO L225 Difference]: With dead ends: 248 [2023-11-06 22:31:09,771 INFO L226 Difference]: Without dead ends: 180 [2023-11-06 22:31:09,772 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:31:09,774 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 260 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 260 SdHoareTripleChecker+Valid, 417 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:09,774 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [260 Valid, 417 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:31:09,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2023-11-06 22:31:09,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 174. [2023-11-06 22:31:09,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 135 states have (on average 1.3703703703703705) internal successors, (185), 153 states have internal predecessors, (185), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2023-11-06 22:31:09,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 230 transitions. [2023-11-06 22:31:09,818 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 230 transitions. Word has length 24 [2023-11-06 22:31:09,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:09,819 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 230 transitions. [2023-11-06 22:31:09,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:09,819 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 230 transitions. [2023-11-06 22:31:09,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 22:31:09,820 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:09,820 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:09,821 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:31:09,821 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:09,821 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:09,822 INFO L85 PathProgramCache]: Analyzing trace with hash 1477369919, now seen corresponding path program 1 times [2023-11-06 22:31:09,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:09,822 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813966490] [2023-11-06 22:31:09,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:09,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:09,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:10,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:10,007 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:10,007 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813966490] [2023-11-06 22:31:10,007 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813966490] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:10,007 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:10,008 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:31:10,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866023077] [2023-11-06 22:31:10,008 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:10,008 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:31:10,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:10,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:31:10,009 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:31:10,024 INFO L87 Difference]: Start difference. First operand 174 states and 230 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:10,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:10,133 INFO L93 Difference]: Finished difference Result 491 states and 675 transitions. [2023-11-06 22:31:10,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:31:10,134 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-11-06 22:31:10,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:10,144 INFO L225 Difference]: With dead ends: 491 [2023-11-06 22:31:10,145 INFO L226 Difference]: Without dead ends: 324 [2023-11-06 22:31:10,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:31:10,157 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 66 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:10,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 351 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:31:10,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2023-11-06 22:31:10,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 324. [2023-11-06 22:31:10,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 250 states have (on average 1.344) internal successors, (336), 282 states have internal predecessors, (336), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) [2023-11-06 22:31:10,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 430 transitions. [2023-11-06 22:31:10,241 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 430 transitions. Word has length 28 [2023-11-06 22:31:10,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:10,242 INFO L495 AbstractCegarLoop]: Abstraction has 324 states and 430 transitions. [2023-11-06 22:31:10,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:10,242 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 430 transitions. [2023-11-06 22:31:10,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:31:10,245 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:10,245 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:10,245 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:31:10,246 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:10,246 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:10,246 INFO L85 PathProgramCache]: Analyzing trace with hash -30603644, now seen corresponding path program 1 times [2023-11-06 22:31:10,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:10,250 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938338008] [2023-11-06 22:31:10,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:10,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:10,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:10,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:10,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:10,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938338008] [2023-11-06 22:31:10,352 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938338008] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:10,352 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:10,352 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:31:10,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063477711] [2023-11-06 22:31:10,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:10,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:31:10,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:10,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:31:10,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:31:10,354 INFO L87 Difference]: Start difference. First operand 324 states and 430 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:10,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:10,426 INFO L93 Difference]: Finished difference Result 748 states and 1019 transitions. [2023-11-06 22:31:10,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:31:10,427 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-06 22:31:10,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:10,434 INFO L225 Difference]: With dead ends: 748 [2023-11-06 22:31:10,434 INFO L226 Difference]: Without dead ends: 431 [2023-11-06 22:31:10,436 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:31:10,440 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 56 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:10,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 151 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:31:10,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 431 states. [2023-11-06 22:31:10,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 431 to 420. [2023-11-06 22:31:10,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 420 states, 330 states have (on average 1.2969696969696969) internal successors, (428), 357 states have internal predecessors, (428), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) [2023-11-06 22:31:10,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 420 states to 420 states and 544 transitions. [2023-11-06 22:31:10,504 INFO L78 Accepts]: Start accepts. Automaton has 420 states and 544 transitions. Word has length 30 [2023-11-06 22:31:10,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:10,504 INFO L495 AbstractCegarLoop]: Abstraction has 420 states and 544 transitions. [2023-11-06 22:31:10,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:10,504 INFO L276 IsEmpty]: Start isEmpty. Operand 420 states and 544 transitions. [2023-11-06 22:31:10,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:31:10,508 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:10,508 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:10,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:31:10,509 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:10,511 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:10,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1736818085, now seen corresponding path program 1 times [2023-11-06 22:31:10,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:10,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582992056] [2023-11-06 22:31:10,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:10,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:10,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:10,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:10,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:10,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:10,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:10,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582992056] [2023-11-06 22:31:10,661 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582992056] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:10,661 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:10,661 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:31:10,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738131959] [2023-11-06 22:31:10,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:10,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:31:10,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:10,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:31:10,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:31:10,663 INFO L87 Difference]: Start difference. First operand 420 states and 544 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:31:10,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:10,940 INFO L93 Difference]: Finished difference Result 511 states and 662 transitions. [2023-11-06 22:31:10,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:31:10,941 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 22:31:10,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:10,945 INFO L225 Difference]: With dead ends: 511 [2023-11-06 22:31:10,945 INFO L226 Difference]: Without dead ends: 509 [2023-11-06 22:31:10,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:31:10,947 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 133 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:10,947 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 309 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:31:10,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 509 states. [2023-11-06 22:31:11,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 509 to 488. [2023-11-06 22:31:11,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 488 states, 383 states have (on average 1.279373368146214) internal successors, (490), 421 states have internal predecessors, (490), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) [2023-11-06 22:31:11,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 488 states to 488 states and 631 transitions. [2023-11-06 22:31:11,009 INFO L78 Accepts]: Start accepts. Automaton has 488 states and 631 transitions. Word has length 32 [2023-11-06 22:31:11,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:11,009 INFO L495 AbstractCegarLoop]: Abstraction has 488 states and 631 transitions. [2023-11-06 22:31:11,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:31:11,009 INFO L276 IsEmpty]: Start isEmpty. Operand 488 states and 631 transitions. [2023-11-06 22:31:11,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:31:11,011 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:11,012 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:11,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:31:11,012 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:11,012 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:11,012 INFO L85 PathProgramCache]: Analyzing trace with hash -2119024627, now seen corresponding path program 1 times [2023-11-06 22:31:11,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:11,013 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1879233957] [2023-11-06 22:31:11,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:11,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:11,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:11,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:31:11,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,188 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:11,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:11,189 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1879233957] [2023-11-06 22:31:11,189 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1879233957] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:11,189 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:11,189 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:31:11,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166708158] [2023-11-06 22:31:11,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:11,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:31:11,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:11,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:31:11,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:31:11,191 INFO L87 Difference]: Start difference. First operand 488 states and 631 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:11,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:11,604 INFO L93 Difference]: Finished difference Result 1083 states and 1452 transitions. [2023-11-06 22:31:11,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:31:11,605 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2023-11-06 22:31:11,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:11,609 INFO L225 Difference]: With dead ends: 1083 [2023-11-06 22:31:11,609 INFO L226 Difference]: Without dead ends: 602 [2023-11-06 22:31:11,612 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=115, Unknown=0, NotChecked=0, Total=156 [2023-11-06 22:31:11,613 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 208 mSDsluCounter, 279 mSDsCounter, 0 mSdLazyCounter, 300 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:11,614 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 347 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 300 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:31:11,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 602 states. [2023-11-06 22:31:11,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 602 to 532. [2023-11-06 22:31:11,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 532 states, 421 states have (on average 1.2636579572446556) internal successors, (532), 459 states have internal predecessors, (532), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) [2023-11-06 22:31:11,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 532 states to 532 states and 681 transitions. [2023-11-06 22:31:11,707 INFO L78 Accepts]: Start accepts. Automaton has 532 states and 681 transitions. Word has length 46 [2023-11-06 22:31:11,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:11,709 INFO L495 AbstractCegarLoop]: Abstraction has 532 states and 681 transitions. [2023-11-06 22:31:11,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:11,709 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 681 transitions. [2023-11-06 22:31:11,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:31:11,712 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:11,712 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:11,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:31:11,712 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:11,712 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:11,713 INFO L85 PathProgramCache]: Analyzing trace with hash -124879921, now seen corresponding path program 1 times [2023-11-06 22:31:11,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:11,713 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845488425] [2023-11-06 22:31:11,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:11,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:11,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:11,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:31:11,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:11,860 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:11,860 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:11,860 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845488425] [2023-11-06 22:31:11,860 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845488425] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:11,861 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:11,861 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:31:11,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677243822] [2023-11-06 22:31:11,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:11,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:31:11,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:11,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:31:11,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:31:11,863 INFO L87 Difference]: Start difference. First operand 532 states and 681 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:12,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:12,231 INFO L93 Difference]: Finished difference Result 1044 states and 1375 transitions. [2023-11-06 22:31:12,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:31:12,232 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2023-11-06 22:31:12,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:12,236 INFO L225 Difference]: With dead ends: 1044 [2023-11-06 22:31:12,236 INFO L226 Difference]: Without dead ends: 519 [2023-11-06 22:31:12,239 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=89, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:31:12,240 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 143 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 285 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:12,240 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 336 Invalid, 285 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:31:12,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 519 states. [2023-11-06 22:31:12,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 519 to 425. [2023-11-06 22:31:12,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 425 states, 336 states have (on average 1.2619047619047619) internal successors, (424), 365 states have internal predecessors, (424), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) [2023-11-06 22:31:12,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 538 transitions. [2023-11-06 22:31:12,300 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 538 transitions. Word has length 46 [2023-11-06 22:31:12,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:12,300 INFO L495 AbstractCegarLoop]: Abstraction has 425 states and 538 transitions. [2023-11-06 22:31:12,300 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:12,300 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 538 transitions. [2023-11-06 22:31:12,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:31:12,302 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:12,302 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:12,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:31:12,302 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:12,303 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:12,303 INFO L85 PathProgramCache]: Analyzing trace with hash 1358294219, now seen corresponding path program 1 times [2023-11-06 22:31:12,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:12,303 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664034814] [2023-11-06 22:31:12,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:12,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:12,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:12,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:12,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:12,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:31:12,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:12,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:12,414 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:12,414 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [664034814] [2023-11-06 22:31:12,414 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [664034814] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:12,414 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:12,415 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:31:12,415 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962725215] [2023-11-06 22:31:12,415 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:12,415 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:31:12,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:12,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:31:12,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:31:12,416 INFO L87 Difference]: Start difference. First operand 425 states and 538 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:12,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:12,916 INFO L93 Difference]: Finished difference Result 971 states and 1304 transitions. [2023-11-06 22:31:12,917 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-06 22:31:12,917 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2023-11-06 22:31:12,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:12,922 INFO L225 Difference]: With dead ends: 971 [2023-11-06 22:31:12,922 INFO L226 Difference]: Without dead ends: 660 [2023-11-06 22:31:12,924 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:31:12,925 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 215 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 333 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 435 SdHoareTripleChecker+Invalid, 378 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 333 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:12,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [217 Valid, 435 Invalid, 378 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 333 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:31:12,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2023-11-06 22:31:13,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 635. [2023-11-06 22:31:13,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 635 states, 501 states have (on average 1.2375249500998005) internal successors, (620), 538 states have internal predecessors, (620), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) [2023-11-06 22:31:13,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 817 transitions. [2023-11-06 22:31:13,046 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 817 transitions. Word has length 46 [2023-11-06 22:31:13,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:13,047 INFO L495 AbstractCegarLoop]: Abstraction has 635 states and 817 transitions. [2023-11-06 22:31:13,047 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:31:13,047 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 817 transitions. [2023-11-06 22:31:13,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2023-11-06 22:31:13,051 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:13,051 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:13,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:31:13,052 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:13,052 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:13,052 INFO L85 PathProgramCache]: Analyzing trace with hash -572504429, now seen corresponding path program 1 times [2023-11-06 22:31:13,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:13,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842358060] [2023-11-06 22:31:13,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:13,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:13,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:13,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:31:13,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:31:13,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-06 22:31:13,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:31:13,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,306 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 11 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-06 22:31:13,306 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:13,306 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842358060] [2023-11-06 22:31:13,306 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842358060] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:31:13,306 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2011908362] [2023-11-06 22:31:13,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:13,307 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:31:13,307 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:31:13,312 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:31:13,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:31:13,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:13,436 INFO L262 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:31:13,445 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:31:13,613 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:31:13,614 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:31:13,784 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-06 22:31:13,785 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2011908362] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:31:13,786 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:31:13,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2023-11-06 22:31:13,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980026876] [2023-11-06 22:31:13,791 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:31:13,791 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:31:13,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:13,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:31:13,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:31:13,793 INFO L87 Difference]: Start difference. First operand 635 states and 817 transitions. Second operand has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:31:14,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:14,589 INFO L93 Difference]: Finished difference Result 1512 states and 2051 transitions. [2023-11-06 22:31:14,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2023-11-06 22:31:14,590 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 80 [2023-11-06 22:31:14,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:14,597 INFO L225 Difference]: With dead ends: 1512 [2023-11-06 22:31:14,598 INFO L226 Difference]: Without dead ends: 991 [2023-11-06 22:31:14,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 168 SyntacticMatches, 7 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 202 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2023-11-06 22:31:14,602 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 257 mSDsluCounter, 459 mSDsCounter, 0 mSdLazyCounter, 436 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 263 SdHoareTripleChecker+Valid, 550 SdHoareTripleChecker+Invalid, 501 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 436 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:14,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [263 Valid, 550 Invalid, 501 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 436 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:31:14,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 991 states. [2023-11-06 22:31:14,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 991 to 862. [2023-11-06 22:31:14,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 862 states, 672 states have (on average 1.244047619047619) internal successors, (836), 725 states have internal predecessors, (836), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) [2023-11-06 22:31:14,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1129 transitions. [2023-11-06 22:31:14,716 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1129 transitions. Word has length 80 [2023-11-06 22:31:14,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:14,717 INFO L495 AbstractCegarLoop]: Abstraction has 862 states and 1129 transitions. [2023-11-06 22:31:14,717 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:31:14,717 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1129 transitions. [2023-11-06 22:31:14,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2023-11-06 22:31:14,722 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:14,722 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:14,738 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:31:14,928 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:31:14,928 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:14,929 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:14,929 INFO L85 PathProgramCache]: Analyzing trace with hash 1682583131, now seen corresponding path program 2 times [2023-11-06 22:31:14,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:14,929 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1228561354] [2023-11-06 22:31:14,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:14,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:14,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:15,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:31:15,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:31:15,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-06 22:31:15,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:31:15,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:31:15,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-06 22:31:15,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:31:15,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:15,498 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:31:15,498 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:15,498 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1228561354] [2023-11-06 22:31:15,499 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1228561354] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:31:15,499 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1611967479] [2023-11-06 22:31:15,499 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2023-11-06 22:31:15,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:31:15,499 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:31:15,500 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:31:15,509 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:31:15,651 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2023-11-06 22:31:15,652 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-06 22:31:15,654 INFO L262 TraceCheckSpWp]: Trace formula consists of 377 conjuncts, 10 conjunts are in the unsatisfiable core [2023-11-06 22:31:15,663 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:31:15,810 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:31:15,810 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:31:15,811 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1611967479] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:15,811 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:31:15,811 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-06 22:31:15,811 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730259262] [2023-11-06 22:31:15,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:15,812 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:31:15,812 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:15,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:31:15,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:31:15,814 INFO L87 Difference]: Start difference. First operand 862 states and 1129 transitions. Second operand has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:31:16,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:16,243 INFO L93 Difference]: Finished difference Result 2363 states and 3215 transitions. [2023-11-06 22:31:16,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:31:16,243 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 114 [2023-11-06 22:31:16,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:16,256 INFO L225 Difference]: With dead ends: 2363 [2023-11-06 22:31:16,257 INFO L226 Difference]: Without dead ends: 1613 [2023-11-06 22:31:16,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 126 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:31:16,263 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 205 mSDsluCounter, 379 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:16,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 527 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:31:16,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1613 states. [2023-11-06 22:31:16,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1613 to 1493. [2023-11-06 22:31:16,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1493 states, 1166 states have (on average 1.2435677530017153) internal successors, (1450), 1246 states have internal predecessors, (1450), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) [2023-11-06 22:31:16,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1493 states to 1493 states and 1920 transitions. [2023-11-06 22:31:16,501 INFO L78 Accepts]: Start accepts. Automaton has 1493 states and 1920 transitions. Word has length 114 [2023-11-06 22:31:16,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:16,502 INFO L495 AbstractCegarLoop]: Abstraction has 1493 states and 1920 transitions. [2023-11-06 22:31:16,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:31:16,502 INFO L276 IsEmpty]: Start isEmpty. Operand 1493 states and 1920 transitions. [2023-11-06 22:31:16,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2023-11-06 22:31:16,507 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:31:16,508 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:16,521 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:31:16,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:31:16,714 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:31:16,714 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:31:16,714 INFO L85 PathProgramCache]: Analyzing trace with hash 2126483805, now seen corresponding path program 1 times [2023-11-06 22:31:16,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:31:16,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204642720] [2023-11-06 22:31:16,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:31:16,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:31:16,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:31:16,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:31:16,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:31:16,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-06 22:31:16,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:31:16,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:31:16,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2023-11-06 22:31:16,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:31:16,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:31:16,885 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-06 22:31:16,885 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:31:16,886 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204642720] [2023-11-06 22:31:16,886 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204642720] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:31:16,886 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:31:16,886 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:31:16,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774431903] [2023-11-06 22:31:16,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:31:16,887 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:31:16,887 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:31:16,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:31:16,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:31:16,888 INFO L87 Difference]: Start difference. First operand 1493 states and 1920 transitions. Second operand has 8 states, 8 states have (on average 10.0) internal successors, (80), 5 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:31:17,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:31:17,206 INFO L93 Difference]: Finished difference Result 2099 states and 2662 transitions. [2023-11-06 22:31:17,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:31:17,207 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.0) internal successors, (80), 5 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 114 [2023-11-06 22:31:17,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:31:17,208 INFO L225 Difference]: With dead ends: 2099 [2023-11-06 22:31:17,208 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:31:17,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:31:17,215 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 110 mSDsluCounter, 233 mSDsCounter, 0 mSdLazyCounter, 244 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:31:17,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 294 Invalid, 270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 244 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:31:17,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:31:17,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:31:17,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:31:17,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:31:17,217 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 114 [2023-11-06 22:31:17,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:31:17,217 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:31:17,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.0) internal successors, (80), 5 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:31:17,217 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:31:17,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:31:17,220 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:31:17,220 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-06 22:31:17,222 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:31:21,685 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 309 316) no Hoare annotation was computed. [2023-11-06 22:31:21,686 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 309 316) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,686 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 309 316) no Hoare annotation was computed. [2023-11-06 22:31:21,686 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 224 230) no Hoare annotation was computed. [2023-11-06 22:31:21,686 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 224 230) the Hoare annotation is: true [2023-11-06 22:31:21,686 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 549 560) the Hoare annotation is: true [2023-11-06 22:31:21,686 INFO L899 garLoopResultBuilder]: For program point L553-1(lines 549 560) no Hoare annotation was computed. [2023-11-06 22:31:21,686 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 549 560) no Hoare annotation was computed. [2023-11-06 22:31:21,686 INFO L899 garLoopResultBuilder]: For program point L449(line 449) no Hoare annotation was computed. [2023-11-06 22:31:21,687 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 428 457) no Hoare annotation was computed. [2023-11-06 22:31:21,687 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 446) no Hoare annotation was computed. [2023-11-06 22:31:21,687 INFO L902 garLoopResultBuilder]: At program point L442-1(lines 442 446) the Hoare annotation is: true [2023-11-06 22:31:21,687 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2023-11-06 22:31:21,687 INFO L902 garLoopResultBuilder]: At program point L438-2(lines 438 452) the Hoare annotation is: true [2023-11-06 22:31:21,687 INFO L902 garLoopResultBuilder]: At program point L434(line 434) the Hoare annotation is: true [2023-11-06 22:31:21,687 INFO L899 garLoopResultBuilder]: For program point L434-1(line 434) no Hoare annotation was computed. [2023-11-06 22:31:21,687 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 428 457) the Hoare annotation is: true [2023-11-06 22:31:21,687 INFO L902 garLoopResultBuilder]: At program point L453(lines 428 457) the Hoare annotation is: true [2023-11-06 22:31:21,687 INFO L899 garLoopResultBuilder]: For program point L630(line 630) no Hoare annotation was computed. [2023-11-06 22:31:21,688 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 616 624) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,688 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 200 223) no Hoare annotation was computed. [2023-11-06 22:31:21,688 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 593 601) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (and .cse7 .cse4 (not .cse2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and (<= 2 ~waterLevel~0) .cse4) .cse1 .cse2 (and .cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) .cse6)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse5 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 (and .cse5 .cse6 .cse7) .cse1 .cse3)))) [2023-11-06 22:31:21,688 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,689 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,689 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 109) no Hoare annotation was computed. [2023-11-06 22:31:21,689 INFO L899 garLoopResultBuilder]: For program point L99(lines 99 112) no Hoare annotation was computed. [2023-11-06 22:31:21,689 INFO L895 garLoopResultBuilder]: At program point L99-1(lines 91 115) the Hoare annotation is: (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse8 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1|)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= 0 ~systemActive~0))) (let ((.cse2 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse4 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1|)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse6 (and .cse7 .cse8 .cse3 .cse9 (not .cse10)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 .cse6) (or (and .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) .cse2 .cse4) .cse5 (and .cse7 .cse8 .cse9) .cse10) (or (and .cse1 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1) (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1)) .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse0 .cse5 .cse6 .cse10)))) [2023-11-06 22:31:21,689 INFO L895 garLoopResultBuilder]: At program point L277(line 277) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1) (or (not .cse0) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1))))) [2023-11-06 22:31:21,690 INFO L895 garLoopResultBuilder]: At program point L277-1(lines 258 282) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) (and .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse2))) (or .cse3 (< |old(~waterLevel~0)| 2) (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) .cse4))) [2023-11-06 22:31:21,690 INFO L899 garLoopResultBuilder]: For program point L211-1(lines 211 217) no Hoare annotation was computed. [2023-11-06 22:31:21,690 INFO L899 garLoopResultBuilder]: For program point L529(lines 529 533) no Hoare annotation was computed. [2023-11-06 22:31:21,690 INFO L899 garLoopResultBuilder]: For program point L401(lines 401 405) no Hoare annotation was computed. [2023-11-06 22:31:21,690 INFO L895 garLoopResultBuilder]: At program point L529-2(lines 525 536) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,690 INFO L899 garLoopResultBuilder]: For program point L401-2(lines 401 405) no Hoare annotation was computed. [2023-11-06 22:31:21,690 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 626 633) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,691 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 200 223) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) .cse0)) (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0)))) [2023-11-06 22:31:21,691 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 392 410) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse1 (= 0 ~systemActive~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,691 INFO L899 garLoopResultBuilder]: For program point L204-1(lines 203 222) no Hoare annotation was computed. [2023-11-06 22:31:21,691 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 200 223) no Hoare annotation was computed. [2023-11-06 22:31:21,691 INFO L899 garLoopResultBuilder]: For program point L266(lines 266 274) no Hoare annotation was computed. [2023-11-06 22:31:21,691 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 328 336) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= 0 ~systemActive~0)) (or .cse1 .cse0) (or .cse1 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:31:21,692 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 630) no Hoare annotation was computed. [2023-11-06 22:31:21,692 INFO L899 garLoopResultBuilder]: For program point L262(lines 262 279) no Hoare annotation was computed. [2023-11-06 22:31:21,692 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2023-11-06 22:31:21,692 INFO L899 garLoopResultBuilder]: For program point L415-1(lines 415 421) no Hoare annotation was computed. [2023-11-06 22:31:21,692 INFO L895 garLoopResultBuilder]: At program point L180(lines 131 181) the Hoare annotation is: false [2023-11-06 22:31:21,692 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 489 498) the Hoare annotation is: true [2023-11-06 22:31:21,692 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:31:21,692 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 499 521) the Hoare annotation is: true [2023-11-06 22:31:21,692 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 174) no Hoare annotation was computed. [2023-11-06 22:31:21,693 INFO L895 garLoopResultBuilder]: At program point L168-2(lines 162 175) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:31:21,693 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:31:21,693 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:31:21,693 INFO L899 garLoopResultBuilder]: For program point L152(lines 152 158) no Hoare annotation was computed. [2023-11-06 22:31:21,693 INFO L899 garLoopResultBuilder]: For program point L152-1(lines 152 158) no Hoare annotation was computed. [2023-11-06 22:31:21,693 INFO L895 garLoopResultBuilder]: At program point L177(lines 132 179) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:31:21,693 INFO L895 garLoopResultBuilder]: At program point L144(line 144) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:31:21,693 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 482 488) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:31:21,694 INFO L895 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point L133(lines 132 179) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point L162(lines 162 175) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point L509(lines 509 516) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L899 garLoopResultBuilder]: For program point L509-2(lines 509 516) no Hoare annotation was computed. [2023-11-06 22:31:21,694 INFO L895 garLoopResultBuilder]: At program point L154(line 154) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-06 22:31:21,695 INFO L902 garLoopResultBuilder]: At program point L183(lines 122 187) the Hoare annotation is: true [2023-11-06 22:31:21,695 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 411 425) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2023-11-06 22:31:21,695 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 148) no Hoare annotation was computed. [2023-11-06 22:31:21,695 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 142 148) no Hoare annotation was computed. [2023-11-06 22:31:21,695 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:31:21,695 INFO L899 garLoopResultBuilder]: For program point L134(lines 134 138) no Hoare annotation was computed. [2023-11-06 22:31:21,695 INFO L899 garLoopResultBuilder]: For program point L382(lines 382 386) no Hoare annotation was computed. [2023-11-06 22:31:21,695 INFO L899 garLoopResultBuilder]: For program point L382-2(lines 382 386) no Hoare annotation was computed. [2023-11-06 22:31:21,696 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1) (or .cse0 (< ~waterLevel~0 1) .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2023-11-06 22:31:21,696 INFO L899 garLoopResultBuilder]: For program point L240(lines 240 248) no Hoare annotation was computed. [2023-11-06 22:31:21,696 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 253) no Hoare annotation was computed. [2023-11-06 22:31:21,696 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 232 256) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,698 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 602 615) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2023-11-06 22:31:21,698 INFO L899 garLoopResultBuilder]: For program point L606(lines 606 612) no Hoare annotation was computed. [2023-11-06 22:31:21,698 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 373 391) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse3)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1|)) .cse1) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse4 (not .cse1))) (or .cse0 (and .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (< ~waterLevel~0 1) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) .cse4) .cse1))))) [2023-11-06 22:31:21,699 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 232 256) no Hoare annotation was computed. [2023-11-06 22:31:21,699 INFO L895 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,699 INFO L899 garLoopResultBuilder]: For program point L251-1(lines 232 256) no Hoare annotation was computed. [2023-11-06 22:31:21,699 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 561 569) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,699 INFO L899 garLoopResultBuilder]: For program point L299(lines 299 305) no Hoare annotation was computed. [2023-11-06 22:31:21,699 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 317 327) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,700 INFO L895 garLoopResultBuilder]: At program point L299-2(lines 292 308) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,700 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 283 290) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2023-11-06 22:31:21,700 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 537 548) no Hoare annotation was computed. [2023-11-06 22:31:21,700 INFO L899 garLoopResultBuilder]: For program point L541-1(lines 537 548) no Hoare annotation was computed. [2023-11-06 22:31:21,700 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 537 548) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)) (or .cse1 .cse2 (= 0 ~systemActive~0)))) [2023-11-06 22:31:21,703 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:31:21,706 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:31:21,738 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:31:21 BoogieIcfgContainer [2023-11-06 22:31:21,738 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:31:21,739 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:31:21,739 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:31:21,739 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:31:21,740 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:31:08" (3/4) ... [2023-11-06 22:31:21,742 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:31:21,747 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:31:21,747 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:31:21,747 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:31:21,747 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:31:21,747 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:31:21,748 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:31:21,753 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:31:21,763 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:31:21,772 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:31:21,772 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:31:21,773 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:31:21,774 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:31:21,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:31:21,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:31:21,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((tmp == 1) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:31:21,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,809 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (((2 <= waterLevel) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((2 <= waterLevel) || (\old(waterLevel) < 2)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel))) || (0 == systemActive))) [2023-11-06 22:31:21,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive)))) && (((((2 <= waterLevel) && (2 <= \result)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && (waterLevel == 1)) && (\result == 1)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive))))) [2023-11-06 22:31:21,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && (1 <= tmp))) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)) && (1 <= tmp)) || (\old(waterLevel) < 2)) || (((2 <= waterLevel) && (2 <= tmp)) && (2 <= \result))) || (0 == systemActive))) && ((((((pumpRunning == 0) && (tmp == 1)) && (waterLevel == 1)) && (\result == 1)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:31:21,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:31:21,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) [2023-11-06 22:31:21,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && ((((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((1 <= \result) && (1 <= tmp))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (waterLevel < 1)) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:31:21,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:31:21,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:31:21,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) [2023-11-06 22:31:21,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) [2023-11-06 22:31:21,882 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:31:21,882 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:31:21,882 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((tmp == 1) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive)))) [2023-11-06 22:31:21,883 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,883 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (((2 <= waterLevel) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((2 <= waterLevel) || (\old(waterLevel) < 2)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel))) || (0 == systemActive))) [2023-11-06 22:31:21,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive)))) && (((((2 <= waterLevel) && (2 <= \result)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && (waterLevel == 1)) && (\result == 1)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive))))) [2023-11-06 22:31:21,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && (1 <= tmp))) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)) && (1 <= tmp)) || (\old(waterLevel) < 2)) || (((2 <= waterLevel) && (2 <= tmp)) && (2 <= \result))) || (0 == systemActive))) && ((((((pumpRunning == 0) && (tmp == 1)) && (waterLevel == 1)) && (\result == 1)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:31:21,884 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) [2023-11-06 22:31:21,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) [2023-11-06 22:31:21,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && ((((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,885 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((1 <= \result) && (1 <= tmp))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (waterLevel < 1)) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0)) && !((0 == systemActive)))) || (0 == systemActive))) [2023-11-06 22:31:21,886 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:31:21,887 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:31:21,888 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) [2023-11-06 22:31:21,888 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) [2023-11-06 22:31:21,888 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) [2023-11-06 22:31:21,909 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:31:21,910 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:31:21,910 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:31:21,911 INFO L158 Benchmark]: Toolchain (without parser) took 14809.00ms. Allocated memory was 146.8MB in the beginning and 297.8MB in the end (delta: 151.0MB). Free memory was 100.3MB in the beginning and 104.2MB in the end (delta: -3.9MB). Peak memory consumption was 148.6MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,911 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 146.8MB. Free memory is still 121.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:31:21,912 INFO L158 Benchmark]: CACSL2BoogieTranslator took 506.63ms. Allocated memory is still 146.8MB. Free memory was 100.3MB in the beginning and 80.6MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,912 INFO L158 Benchmark]: Boogie Procedure Inliner took 77.96ms. Allocated memory is still 146.8MB. Free memory was 80.6MB in the beginning and 78.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,913 INFO L158 Benchmark]: Boogie Preprocessor took 62.62ms. Allocated memory is still 146.8MB. Free memory was 78.0MB in the beginning and 76.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,915 INFO L158 Benchmark]: RCFGBuilder took 651.63ms. Allocated memory was 146.8MB in the beginning and 205.5MB in the end (delta: 58.7MB). Free memory was 76.5MB in the beginning and 168.2MB in the end (delta: -91.8MB). Peak memory consumption was 15.4MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,916 INFO L158 Benchmark]: TraceAbstraction took 13327.66ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 168.2MB in the beginning and 111.6MB in the end (delta: 56.7MB). Peak memory consumption was 175.3MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,917 INFO L158 Benchmark]: Witness Printer took 171.34ms. Allocated memory is still 297.8MB. Free memory was 111.6MB in the beginning and 104.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:31:21,921 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 146.8MB. Free memory is still 121.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 506.63ms. Allocated memory is still 146.8MB. Free memory was 100.3MB in the beginning and 80.6MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 77.96ms. Allocated memory is still 146.8MB. Free memory was 80.6MB in the beginning and 78.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 62.62ms. Allocated memory is still 146.8MB. Free memory was 78.0MB in the beginning and 76.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 651.63ms. Allocated memory was 146.8MB in the beginning and 205.5MB in the end (delta: 58.7MB). Free memory was 76.5MB in the beginning and 168.2MB in the end (delta: -91.8MB). Peak memory consumption was 15.4MB. Max. memory is 16.1GB. * TraceAbstraction took 13327.66ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 168.2MB in the beginning and 111.6MB in the end (delta: 56.7MB). Peak memory consumption was 175.3MB. Max. memory is 16.1GB. * Witness Printer took 171.34ms. Allocated memory is still 297.8MB. Free memory was 111.6MB in the beginning and 104.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [87] - GenericResultAtLocation [Line: 116]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [116] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [188] - GenericResultAtLocation [Line: 426]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [426] - GenericResultAtLocation [Line: 522]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [522] - GenericResultAtLocation [Line: 625]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [625] - GenericResultAtLocation [Line: 634]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 630]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1689 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1669 mSDsluCounter, 4006 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2904 mSDsCounter, 325 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1986 IncrementalHoareTripleChecker+Invalid, 2311 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 325 mSolverCounterUnsat, 1102 mSDtfsCounter, 1986 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 343 SyntacticMatches, 10 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 344 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1493occurred in iteration=11, InterpolantAutomatonStates: 113, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 476 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2690 PreInvPairs, 2995 NumberOfFragments, 1129 HoareAnnotationTreeSize, 2690 FomulaSimplifications, 15571 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 44 FomulaSimplificationsInter, 10943 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.5s InterpolantComputationTime, 793 NumberOfCodeBlocks, 793 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 858 ConstructedInterpolants, 0 QuantifiedInterpolants, 1667 SizeOfPredicates, 8 NumberOfNonLiveVariables, 671 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 252/282 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 131]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 482]: Loop Invariant Derived loop invariant: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (((2 <= waterLevel) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) && ((((2 <= waterLevel) || (\old(waterLevel) < 2)) || ((((pumpRunning == 0) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && ((((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 91]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel)) && (1 <= tmp))) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)) && (1 <= tmp)) || (\old(waterLevel) < 2)) || (((2 <= waterLevel) && (2 <= tmp)) && (2 <= \result))) || (0 == systemActive))) && ((((((pumpRunning == 0) && (tmp == 1)) && (waterLevel == 1)) && (\result == 1)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((((2 <= waterLevel) && (2 <= tmp)) && (\old(waterLevel) == waterLevel)) && (2 <= \result)) && !((0 == systemActive)))) || (0 == systemActive))) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 602]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || ((1 <= \result) && (pumpRunning == 0))) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (((\old(waterLevel) < 2) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 373]: Loop Invariant Derived loop invariant: ((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || ((1 <= \result) && (1 <= tmp))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (\old(pumpRunning) == 0)) && !((0 == systemActive)))) || (waterLevel < 1)) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (\old(pumpRunning) == 0)) && (\result == 0)) && !((0 == systemActive)))) || (0 == systemActive))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (2 <= waterLevel)) || (0 == systemActive)) - InvariantResult [Line: 626]: Loop Invariant Derived loop invariant: ((((\old(waterLevel) < 2) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: (((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((tmp == 1) && (\result == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive)))) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: (((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive)))) && (((((2 <= waterLevel) && (2 <= \result)) || (\old(waterLevel) < 2)) || (0 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= \result)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && (waterLevel == 1)) && (\result == 1)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (1 <= \result)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2)) || (((\old(waterLevel) == waterLevel) && (2 <= \result)) && !((0 == systemActive))))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:31:21,976 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7ecad7e5-ca97-4495-83a0-16190495c90f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE