./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:07:43,106 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:07:43,202 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-12 02:07:43,217 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:07:43,218 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:07:43,267 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:07:43,270 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:07:43,271 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:07:43,272 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:07:43,274 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:07:43,276 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:07:43,276 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:07:43,277 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:07:43,281 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:07:43,282 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:07:43,282 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-12 02:07:43,284 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:07:43,290 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-12 02:07:43,290 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:07:43,291 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:07:43,291 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:07:43,292 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:07:43,293 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-12 02:07:43,293 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:07:43,294 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:07:43,294 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:07:43,295 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:07:43,296 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:07:43,296 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:07:43,297 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:07:43,298 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:07:43,299 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:07:43,299 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:07:43,300 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:07:43,300 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:07:43,300 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:07:43,301 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:07:43,301 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:07:43,301 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:07:43,301 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 [2023-11-12 02:07:43,637 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:07:43,669 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:07:43,672 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:07:43,674 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:07:43,675 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:07:43,676 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2023-11-12 02:07:46,804 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:07:47,163 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:07:47,164 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2023-11-12 02:07:47,185 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/data/9999510cb/d890817a207f41fca18ad34c30f173ab/FLAG4252cb14a [2023-11-12 02:07:47,201 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/data/9999510cb/d890817a207f41fca18ad34c30f173ab [2023-11-12 02:07:47,210 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:07:47,212 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:07:47,214 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:07:47,215 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:07:47,220 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:07:47,223 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,224 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@dcde2c3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47, skipping insertion in model container [2023-11-12 02:07:47,224 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,302 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:07:47,558 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2023-11-12 02:07:47,664 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:07:47,674 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:07:47,681 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-12 02:07:47,683 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [118] [2023-11-12 02:07:47,684 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [368] [2023-11-12 02:07:47,684 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [472] [2023-11-12 02:07:47,684 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [481] [2023-11-12 02:07:47,684 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [580] [2023-11-12 02:07:47,685 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [614] [2023-11-12 02:07:47,685 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [649] [2023-11-12 02:07:47,718 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2023-11-12 02:07:47,796 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:07:47,841 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:07:47,842 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47 WrapperNode [2023-11-12 02:07:47,842 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:07:47,843 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:07:47,843 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:07:47,844 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:07:47,866 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,881 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,912 INFO L138 Inliner]: procedures = 57, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 227 [2023-11-12 02:07:47,913 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:07:47,914 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:07:47,914 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:07:47,914 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:07:47,924 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,925 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,928 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,928 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,937 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,943 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,945 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,947 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,950 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:07:47,951 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:07:47,952 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:07:47,952 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:07:47,953 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (1/1) ... [2023-11-12 02:07:47,974 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:07:48,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:07:48,022 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:07:48,039 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:07:48,068 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:07:48,069 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-12 02:07:48,069 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-12 02:07:48,069 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-12 02:07:48,071 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-12 02:07:48,072 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-12 02:07:48,072 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-12 02:07:48,073 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-12 02:07:48,073 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-12 02:07:48,073 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-12 02:07:48,073 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-12 02:07:48,073 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-12 02:07:48,074 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-12 02:07:48,074 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:07:48,074 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:07:48,074 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-12 02:07:48,075 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-12 02:07:48,075 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-12 02:07:48,076 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-12 02:07:48,076 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:07:48,077 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-12 02:07:48,077 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-12 02:07:48,078 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:07:48,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:07:48,224 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:07:48,227 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:07:48,643 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:07:48,652 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:07:48,652 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-12 02:07:48,655 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:07:48 BoogieIcfgContainer [2023-11-12 02:07:48,655 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:07:48,658 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:07:48,659 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:07:48,662 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:07:48,663 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:07:47" (1/3) ... [2023-11-12 02:07:48,664 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ccc15a4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:07:48, skipping insertion in model container [2023-11-12 02:07:48,664 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:07:47" (2/3) ... [2023-11-12 02:07:48,665 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ccc15a4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:07:48, skipping insertion in model container [2023-11-12 02:07:48,665 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:07:48" (3/3) ... [2023-11-12 02:07:48,666 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2023-11-12 02:07:48,688 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:07:48,688 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:07:48,746 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:07:48,752 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@107a13ed, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:07:48,753 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:07:48,757 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-12 02:07:48,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-12 02:07:48,770 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:48,771 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:48,771 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:48,777 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:48,778 INFO L85 PathProgramCache]: Analyzing trace with hash -1589663850, now seen corresponding path program 1 times [2023-11-12 02:07:48,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:48,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684186458] [2023-11-12 02:07:48,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:48,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:48,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:48,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-12 02:07:48,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:48,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:48,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:48,987 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684186458] [2023-11-12 02:07:48,987 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [684186458] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:48,988 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:48,988 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-12 02:07:48,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126954231] [2023-11-12 02:07:48,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:48,995 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-12 02:07:48,995 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:49,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-12 02:07:49,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:07:49,026 INFO L87 Difference]: Start difference. First operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:49,064 INFO L93 Difference]: Finished difference Result 212 states and 287 transitions. [2023-11-12 02:07:49,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-12 02:07:49,069 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-12 02:07:49,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:49,080 INFO L225 Difference]: With dead ends: 212 [2023-11-12 02:07:49,080 INFO L226 Difference]: Without dead ends: 101 [2023-11-12 02:07:49,085 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:07:49,089 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:49,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:07:49,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2023-11-12 02:07:49,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2023-11-12 02:07:49,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 82 states have internal predecessors, (96), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-12 02:07:49,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2023-11-12 02:07:49,186 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 25 [2023-11-12 02:07:49,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:49,187 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2023-11-12 02:07:49,188 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,188 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2023-11-12 02:07:49,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-12 02:07:49,192 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:49,192 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:49,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:07:49,192 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:49,193 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:49,193 INFO L85 PathProgramCache]: Analyzing trace with hash 363264377, now seen corresponding path program 1 times [2023-11-12 02:07:49,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:49,194 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253133379] [2023-11-12 02:07:49,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:49,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:49,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:49,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-12 02:07:49,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:49,400 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:49,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:49,401 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253133379] [2023-11-12 02:07:49,401 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253133379] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:49,401 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:49,401 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:07:49,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099887305] [2023-11-12 02:07:49,402 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:49,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:07:49,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:49,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:07:49,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:07:49,411 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:49,439 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2023-11-12 02:07:49,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:07:49,441 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-12 02:07:49,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:49,443 INFO L225 Difference]: With dead ends: 168 [2023-11-12 02:07:49,443 INFO L226 Difference]: Without dead ends: 92 [2023-11-12 02:07:49,445 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:07:49,446 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 12 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:49,447 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 220 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:07:49,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-12 02:07:49,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-12 02:07:49,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.328358208955224) internal successors, (89), 76 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-12 02:07:49,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2023-11-12 02:07:49,463 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 26 [2023-11-12 02:07:49,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:49,464 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2023-11-12 02:07:49,464 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,464 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2023-11-12 02:07:49,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-12 02:07:49,466 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:49,468 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:49,468 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:07:49,469 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:49,469 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:49,469 INFO L85 PathProgramCache]: Analyzing trace with hash -1922022974, now seen corresponding path program 1 times [2023-11-12 02:07:49,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:49,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [333086982] [2023-11-12 02:07:49,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:49,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:49,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:49,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-12 02:07:49,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:49,701 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:49,701 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:49,702 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [333086982] [2023-11-12 02:07:49,702 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [333086982] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:49,702 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:49,702 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-12 02:07:49,703 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537359224] [2023-11-12 02:07:49,703 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:49,703 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-12 02:07:49,704 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:49,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-12 02:07:49,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-12 02:07:49,705 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:49,914 INFO L93 Difference]: Finished difference Result 177 states and 232 transitions. [2023-11-12 02:07:49,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:07:49,915 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-12 02:07:49,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:49,919 INFO L225 Difference]: With dead ends: 177 [2023-11-12 02:07:49,919 INFO L226 Difference]: Without dead ends: 92 [2023-11-12 02:07:49,920 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:07:49,922 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 143 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:49,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 250 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-12 02:07:49,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-12 02:07:49,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2023-11-12 02:07:49,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 76 states have internal predecessors, (88), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-12 02:07:49,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 118 transitions. [2023-11-12 02:07:49,975 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 118 transitions. Word has length 30 [2023-11-12 02:07:49,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:49,976 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 118 transitions. [2023-11-12 02:07:49,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:07:49,976 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 118 transitions. [2023-11-12 02:07:49,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-12 02:07:49,986 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:49,986 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:49,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-12 02:07:49,987 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:49,989 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:49,989 INFO L85 PathProgramCache]: Analyzing trace with hash -1575345012, now seen corresponding path program 1 times [2023-11-12 02:07:49,990 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:49,990 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523850634] [2023-11-12 02:07:49,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:49,990 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:50,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-12 02:07:50,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:50,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:50,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-12 02:07:50,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:50,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:50,240 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523850634] [2023-11-12 02:07:50,240 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523850634] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:50,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:50,242 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-12 02:07:50,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234320476] [2023-11-12 02:07:50,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:50,243 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:07:50,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:50,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:07:50,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:07:50,245 INFO L87 Difference]: Start difference. First operand 92 states and 118 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-12 02:07:50,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:50,524 INFO L93 Difference]: Finished difference Result 268 states and 342 transitions. [2023-11-12 02:07:50,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-12 02:07:50,525 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 45 [2023-11-12 02:07:50,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:50,533 INFO L225 Difference]: With dead ends: 268 [2023-11-12 02:07:50,533 INFO L226 Difference]: Without dead ends: 183 [2023-11-12 02:07:50,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:07:50,544 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 231 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:50,544 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [233 Valid, 318 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-12 02:07:50,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2023-11-12 02:07:50,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 177. [2023-11-12 02:07:50,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.251908396946565) internal successors, (164), 140 states have internal predecessors, (164), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-12 02:07:50,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 215 transitions. [2023-11-12 02:07:50,594 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 215 transitions. Word has length 45 [2023-11-12 02:07:50,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:50,595 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 215 transitions. [2023-11-12 02:07:50,595 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-12 02:07:50,595 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 215 transitions. [2023-11-12 02:07:50,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-12 02:07:50,601 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:50,601 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:50,602 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-12 02:07:50,602 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:50,603 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:50,603 INFO L85 PathProgramCache]: Analyzing trace with hash -1919204828, now seen corresponding path program 1 times [2023-11-12 02:07:50,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:50,604 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14810803] [2023-11-12 02:07:50,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:50,604 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:50,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-12 02:07:50,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:50,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:50,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-12 02:07:50,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:50,795 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:50,796 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:50,796 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14810803] [2023-11-12 02:07:50,796 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14810803] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:50,797 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:50,797 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-12 02:07:50,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219311771] [2023-11-12 02:07:50,799 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:50,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-12 02:07:50,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:50,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-12 02:07:50,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-12 02:07:50,802 INFO L87 Difference]: Start difference. First operand 177 states and 215 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-12 02:07:51,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:51,138 INFO L93 Difference]: Finished difference Result 452 states and 570 transitions. [2023-11-12 02:07:51,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-12 02:07:51,139 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2023-11-12 02:07:51,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:51,152 INFO L225 Difference]: With dead ends: 452 [2023-11-12 02:07:51,153 INFO L226 Difference]: Without dead ends: 282 [2023-11-12 02:07:51,154 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-12 02:07:51,161 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 159 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:51,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 404 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-12 02:07:51,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2023-11-12 02:07:51,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 274. [2023-11-12 02:07:51,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 203 states have (on average 1.2413793103448276) internal successors, (252), 215 states have internal predecessors, (252), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2023-11-12 02:07:51,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 335 transitions. [2023-11-12 02:07:51,241 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 335 transitions. Word has length 51 [2023-11-12 02:07:51,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:51,242 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 335 transitions. [2023-11-12 02:07:51,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-12 02:07:51,243 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 335 transitions. [2023-11-12 02:07:51,244 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-12 02:07:51,244 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:51,245 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:51,245 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-12 02:07:51,245 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:51,245 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:51,245 INFO L85 PathProgramCache]: Analyzing trace with hash -1745115842, now seen corresponding path program 1 times [2023-11-12 02:07:51,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:51,246 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773622282] [2023-11-12 02:07:51,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:51,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:51,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:51,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:07:51,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:51,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:51,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-12 02:07:51,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:51,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:51,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:51,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773622282] [2023-11-12 02:07:51,419 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773622282] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:51,419 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:51,419 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-12 02:07:51,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509654351] [2023-11-12 02:07:51,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:51,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-12 02:07:51,420 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:51,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-12 02:07:51,421 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:07:51,421 INFO L87 Difference]: Start difference. First operand 274 states and 335 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-12 02:07:52,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:52,132 INFO L93 Difference]: Finished difference Result 666 states and 852 transitions. [2023-11-12 02:07:52,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-11-12 02:07:52,132 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 55 [2023-11-12 02:07:52,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:52,140 INFO L225 Difference]: With dead ends: 666 [2023-11-12 02:07:52,140 INFO L226 Difference]: Without dead ends: 496 [2023-11-12 02:07:52,142 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2023-11-12 02:07:52,144 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 445 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 450 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 577 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:52,147 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [450 Valid, 314 Invalid, 577 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-12 02:07:52,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2023-11-12 02:07:52,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 458. [2023-11-12 02:07:52,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 337 states have (on average 1.2195845697329377) internal successors, (411), 359 states have internal predecessors, (411), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2023-11-12 02:07:52,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 566 transitions. [2023-11-12 02:07:52,253 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 566 transitions. Word has length 55 [2023-11-12 02:07:52,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:52,253 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 566 transitions. [2023-11-12 02:07:52,253 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-12 02:07:52,254 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 566 transitions. [2023-11-12 02:07:52,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-12 02:07:52,256 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:52,256 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:52,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-12 02:07:52,257 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:52,257 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:52,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1683076228, now seen corresponding path program 1 times [2023-11-12 02:07:52,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:52,258 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047618261] [2023-11-12 02:07:52,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:52,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:52,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:52,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:07:52,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:52,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:52,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-12 02:07:52,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,413 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:52,413 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:52,413 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047618261] [2023-11-12 02:07:52,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047618261] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:52,413 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:52,413 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-12 02:07:52,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686191924] [2023-11-12 02:07:52,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:52,415 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-12 02:07:52,416 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:52,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-12 02:07:52,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-12 02:07:52,417 INFO L87 Difference]: Start difference. First operand 458 states and 566 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-12 02:07:52,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:52,787 INFO L93 Difference]: Finished difference Result 826 states and 1026 transitions. [2023-11-12 02:07:52,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-12 02:07:52,787 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2023-11-12 02:07:52,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:52,791 INFO L225 Difference]: With dead ends: 826 [2023-11-12 02:07:52,792 INFO L226 Difference]: Without dead ends: 468 [2023-11-12 02:07:52,793 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-12 02:07:52,796 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 165 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 321 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:52,797 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 280 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 321 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-12 02:07:52,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2023-11-12 02:07:52,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 458. [2023-11-12 02:07:52,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 337 states have (on average 1.2166172106824926) internal successors, (410), 359 states have internal predecessors, (410), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2023-11-12 02:07:52,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 565 transitions. [2023-11-12 02:07:52,862 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 565 transitions. Word has length 55 [2023-11-12 02:07:52,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:52,864 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 565 transitions. [2023-11-12 02:07:52,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-12 02:07:52,864 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 565 transitions. [2023-11-12 02:07:52,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-12 02:07:52,865 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:52,866 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:52,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-12 02:07:52,868 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:52,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:52,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1817089734, now seen corresponding path program 1 times [2023-11-12 02:07:52,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:52,870 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1698124052] [2023-11-12 02:07:52,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:52,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:52,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:52,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:52,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:07:52,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:53,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:53,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-12 02:07:53,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:07:53,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:53,078 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1698124052] [2023-11-12 02:07:53,078 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1698124052] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:53,078 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:53,078 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-12 02:07:53,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [422941363] [2023-11-12 02:07:53,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:53,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-12 02:07:53,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:53,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-12 02:07:53,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2023-11-12 02:07:53,081 INFO L87 Difference]: Start difference. First operand 458 states and 565 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-12 02:07:53,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:53,592 INFO L93 Difference]: Finished difference Result 938 states and 1173 transitions. [2023-11-12 02:07:53,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-12 02:07:53,592 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2023-11-12 02:07:53,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:53,596 INFO L225 Difference]: With dead ends: 938 [2023-11-12 02:07:53,596 INFO L226 Difference]: Without dead ends: 487 [2023-11-12 02:07:53,598 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=160, Unknown=0, NotChecked=0, Total=210 [2023-11-12 02:07:53,599 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 211 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 214 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:53,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [214 Valid, 425 Invalid, 622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-12 02:07:53,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2023-11-12 02:07:53,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 461. [2023-11-12 02:07:53,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 342 states have (on average 1.2105263157894737) internal successors, (414), 363 states have internal predecessors, (414), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2023-11-12 02:07:53,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 567 transitions. [2023-11-12 02:07:53,652 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 567 transitions. Word has length 55 [2023-11-12 02:07:53,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:53,653 INFO L495 AbstractCegarLoop]: Abstraction has 461 states and 567 transitions. [2023-11-12 02:07:53,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-12 02:07:53,653 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 567 transitions. [2023-11-12 02:07:53,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2023-11-12 02:07:53,654 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:53,655 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:53,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-12 02:07:53,655 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:53,655 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:53,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1139830327, now seen corresponding path program 1 times [2023-11-12 02:07:53,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:53,656 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1359466298] [2023-11-12 02:07:53,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:53,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:53,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:53,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:07:53,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:53,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:53,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:07:53,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2023-11-12 02:07:53,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:53,978 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:07:53,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:53,978 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1359466298] [2023-11-12 02:07:53,978 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1359466298] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:53,978 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:53,979 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-12 02:07:53,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [541230069] [2023-11-12 02:07:53,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:53,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-12 02:07:53,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:53,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-12 02:07:53,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-12 02:07:53,981 INFO L87 Difference]: Start difference. First operand 461 states and 567 transitions. Second operand has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-12 02:07:55,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:55,129 INFO L93 Difference]: Finished difference Result 1331 states and 1697 transitions. [2023-11-12 02:07:55,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2023-11-12 02:07:55,130 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2023-11-12 02:07:55,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:55,137 INFO L225 Difference]: With dead ends: 1331 [2023-11-12 02:07:55,137 INFO L226 Difference]: Without dead ends: 877 [2023-11-12 02:07:55,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=243, Invalid=1017, Unknown=0, NotChecked=0, Total=1260 [2023-11-12 02:07:55,142 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 225 mSDsluCounter, 787 mSDsCounter, 0 mSdLazyCounter, 1329 mSolverCounterSat, 83 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 901 SdHoareTripleChecker+Invalid, 1412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 83 IncrementalHoareTripleChecker+Valid, 1329 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:55,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 901 Invalid, 1412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [83 Valid, 1329 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-12 02:07:55,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 877 states. [2023-11-12 02:07:55,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 877 to 862. [2023-11-12 02:07:55,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 862 states, 629 states have (on average 1.1828298887122417) internal successors, (744), 667 states have internal predecessors, (744), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (205), 123 states have call predecessors, (205), 117 states have call successors, (205) [2023-11-12 02:07:55,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1066 transitions. [2023-11-12 02:07:55,258 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1066 transitions. Word has length 64 [2023-11-12 02:07:55,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:55,258 INFO L495 AbstractCegarLoop]: Abstraction has 862 states and 1066 transitions. [2023-11-12 02:07:55,258 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-12 02:07:55,258 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1066 transitions. [2023-11-12 02:07:55,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-12 02:07:55,262 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:55,262 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:55,262 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-12 02:07:55,262 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:55,263 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:55,263 INFO L85 PathProgramCache]: Analyzing trace with hash 890398829, now seen corresponding path program 1 times [2023-11-12 02:07:55,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:55,263 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452209481] [2023-11-12 02:07:55,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:55,263 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:55,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:55,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:07:55,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:55,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:55,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:07:55,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-12 02:07:55,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:55,426 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:07:55,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:55,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452209481] [2023-11-12 02:07:55,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452209481] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:07:55,427 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:07:55,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:07:55,427 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1674515905] [2023-11-12 02:07:55,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:07:55,428 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-12 02:07:55,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:55,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-12 02:07:55,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:07:55,429 INFO L87 Difference]: Start difference. First operand 862 states and 1066 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-12 02:07:55,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:55,905 INFO L93 Difference]: Finished difference Result 1723 states and 2131 transitions. [2023-11-12 02:07:55,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-12 02:07:55,905 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2023-11-12 02:07:55,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:55,911 INFO L225 Difference]: With dead ends: 1723 [2023-11-12 02:07:55,912 INFO L226 Difference]: Without dead ends: 868 [2023-11-12 02:07:55,915 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2023-11-12 02:07:55,916 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 233 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 469 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 448 SdHoareTripleChecker+Invalid, 543 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 469 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:55,917 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [236 Valid, 448 Invalid, 543 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 469 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-12 02:07:55,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 868 states. [2023-11-12 02:07:56,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 868 to 862. [2023-11-12 02:07:56,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 862 states, 629 states have (on average 1.1701112877583466) internal successors, (736), 667 states have internal predecessors, (736), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (186), 123 states have call predecessors, (186), 117 states have call successors, (186) [2023-11-12 02:07:56,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1039 transitions. [2023-11-12 02:07:56,023 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1039 transitions. Word has length 65 [2023-11-12 02:07:56,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:56,025 INFO L495 AbstractCegarLoop]: Abstraction has 862 states and 1039 transitions. [2023-11-12 02:07:56,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-12 02:07:56,025 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1039 transitions. [2023-11-12 02:07:56,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2023-11-12 02:07:56,030 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:07:56,030 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:07:56,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-12 02:07:56,030 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:07:56,031 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:07:56,031 INFO L85 PathProgramCache]: Analyzing trace with hash -1014722144, now seen corresponding path program 1 times [2023-11-12 02:07:56,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:07:56,031 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948200416] [2023-11-12 02:07:56,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:56,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:07:56,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:07:56,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-12 02:07:56,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-12 02:07:56,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:07:56,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:07:56,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:07:56,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-12 02:07:56,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-12 02:07:56,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:07:56,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-12 02:07:56,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2023-11-12 02:07:56,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,383 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-12 02:07:56,383 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:07:56,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948200416] [2023-11-12 02:07:56,384 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948200416] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-12 02:07:56,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1965491532] [2023-11-12 02:07:56,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:07:56,384 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-12 02:07:56,384 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:07:56,390 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-12 02:07:56,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-12 02:07:56,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:07:56,521 INFO L262 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-12 02:07:56,535 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-12 02:07:56,853 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-12 02:07:56,853 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-12 02:07:57,286 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-11-12 02:07:57,286 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1965491532] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-12 02:07:57,287 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-12 02:07:57,287 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2023-11-12 02:07:57,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524486702] [2023-11-12 02:07:57,287 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-12 02:07:57,288 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-12 02:07:57,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:07:57,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-12 02:07:57,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2023-11-12 02:07:57,290 INFO L87 Difference]: Start difference. First operand 862 states and 1039 transitions. Second operand has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) [2023-11-12 02:07:59,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:07:59,374 INFO L93 Difference]: Finished difference Result 1809 states and 2244 transitions. [2023-11-12 02:07:59,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2023-11-12 02:07:59,375 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) Word has length 105 [2023-11-12 02:07:59,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:07:59,376 INFO L225 Difference]: With dead ends: 1809 [2023-11-12 02:07:59,376 INFO L226 Difference]: Without dead ends: 0 [2023-11-12 02:07:59,383 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 310 GetRequests, 228 SyntacticMatches, 7 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1630 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=1291, Invalid=4561, Unknown=0, NotChecked=0, Total=5852 [2023-11-12 02:07:59,384 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 647 mSDsluCounter, 594 mSDsCounter, 0 mSdLazyCounter, 1122 mSolverCounterSat, 289 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 649 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 1411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 289 IncrementalHoareTripleChecker+Valid, 1122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:07:59,385 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [649 Valid, 645 Invalid, 1411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [289 Valid, 1122 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2023-11-12 02:07:59,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-12 02:07:59,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-12 02:07:59,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:07:59,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-12 02:07:59,386 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 105 [2023-11-12 02:07:59,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:07:59,387 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-12 02:07:59,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) [2023-11-12 02:07:59,387 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-12 02:07:59,387 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-12 02:07:59,390 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-12 02:07:59,414 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-12 02:07:59,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-12 02:07:59,614 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-12 02:08:02,514 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 266 273) no Hoare annotation was computed. [2023-11-12 02:08:02,515 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 266 273) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2023-11-12 02:08:02,515 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 266 273) no Hoare annotation was computed. [2023-11-12 02:08:02,515 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 156 162) no Hoare annotation was computed. [2023-11-12 02:08:02,515 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 156 162) the Hoare annotation is: true [2023-11-12 02:08:02,515 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1))))) [2023-11-12 02:08:02,515 INFO L899 garLoopResultBuilder]: For program point L209-1(lines 190 214) no Hoare annotation was computed. [2023-11-12 02:08:02,515 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 463 471) no Hoare annotation was computed. [2023-11-12 02:08:02,515 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 190 214) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 362) no Hoare annotation was computed. [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point L358-2(lines 358 362) no Hoare annotation was computed. [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 349 367) no Hoare annotation was computed. [2023-11-12 02:08:02,516 INFO L895 garLoopResultBuilder]: At program point L204(line 204) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 190 214) no Hoare annotation was computed. [2023-11-12 02:08:02,516 INFO L895 garLoopResultBuilder]: At program point L200(line 200) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 206) no Hoare annotation was computed. [2023-11-12 02:08:02,516 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point L400-1(lines 396 407) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 396 407) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse1 (not .cse5)) (.cse7 (not (= ~pumpRunning~0 1))) (.cse0 (< 2 ~waterLevel~0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not .cse3))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse3 .cse4 .cse7) (or .cse0 .cse2 .cse4 .cse5 .cse6)))) [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 396 407) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 408 416) the Hoare annotation is: true [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 408 416) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 408 416) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 483 512) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point L508(lines 483 512) no Hoare annotation was computed. [2023-11-12 02:08:02,517 INFO L899 garLoopResultBuilder]: For program point L504(line 504) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point L497(lines 497 501) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L902 garLoopResultBuilder]: At program point L497-1(lines 497 501) the Hoare annotation is: true [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point L494(line 494) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L902 garLoopResultBuilder]: At program point L493-2(lines 493 507) the Hoare annotation is: true [2023-11-12 02:08:02,518 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 483 512) the Hoare annotation is: true [2023-11-12 02:08:02,518 INFO L902 garLoopResultBuilder]: At program point L489(line 489) the Hoare annotation is: true [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point L489-1(line 489) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point L477(line 477) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point L143-1(lines 143 149) no Hoare annotation was computed. [2023-11-12 02:08:02,518 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 132 155) no Hoare annotation was computed. [2023-11-12 02:08:02,519 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-12 02:08:02,519 INFO L895 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-12 02:08:02,519 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2023-11-12 02:08:02,519 INFO L899 garLoopResultBuilder]: For program point L222-1(line 222) no Hoare annotation was computed. [2023-11-12 02:08:02,519 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 440 448) no Hoare annotation was computed. [2023-11-12 02:08:02,519 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 610) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L895 garLoopResultBuilder]: At program point L235(line 235) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1))) [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L235-1(lines 216 240) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L136-1(lines 135 154) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L376(lines 376 380) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L376-2(lines 372 383) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 473 480) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 132 155) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1))) [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L224(lines 224 232) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L220(lines 220 237) no Hoare annotation was computed. [2023-11-12 02:08:02,520 INFO L899 garLoopResultBuilder]: For program point L600(lines 600 606) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point L596(lines 596 609) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point L596-1(lines 581 613) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0 1)) (.cse2 (= ~pumpRunning~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (let ((.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or (and .cse4 .cse0 .cse6) .cse7 .cse3 (not .cse8) .cse5 (and .cse6 .cse2)) (or .cse7 (and .cse4 .cse6) .cse8 .cse3 .cse5))) [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point L588-1(line 588) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 132 155) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 285 293) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 477) no Hoare annotation was computed. [2023-11-12 02:08:02,521 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 544 553) no Hoare annotation was computed. [2023-11-12 02:08:02,522 INFO L895 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2023-11-12 02:08:02,522 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 626 632) no Hoare annotation was computed. [2023-11-12 02:08:02,522 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 557 579) no Hoare annotation was computed. [2023-11-12 02:08:02,522 INFO L899 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2023-11-12 02:08:02,522 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-12 02:08:02,522 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 105) no Hoare annotation was computed. [2023-11-12 02:08:02,527 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-12 02:08:02,528 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2023-11-12 02:08:02,528 INFO L895 garLoopResultBuilder]: At program point L107(lines 64 109) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 (not .cse4) .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse3 .cse5) (and .cse0 .cse4 .cse2 .cse3 .cse5 .cse6 .cse8) (and .cse0 .cse2 .cse7 .cse3 .cse5 .cse8))) [2023-11-12 02:08:02,528 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2023-11-12 02:08:02,528 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 537 543) no Hoare annotation was computed. [2023-11-12 02:08:02,528 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2023-11-12 02:08:02,528 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-11-12 02:08:02,529 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-12 02:08:02,529 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-12 02:08:02,529 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 633 639) no Hoare annotation was computed. [2023-11-12 02:08:02,529 INFO L899 garLoopResultBuilder]: For program point L100(lines 100 104) no Hoare annotation was computed. [2023-11-12 02:08:02,530 INFO L895 garLoopResultBuilder]: At program point L100-2(lines 94 105) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2023-11-12 02:08:02,530 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 574) no Hoare annotation was computed. [2023-11-12 02:08:02,530 INFO L899 garLoopResultBuilder]: For program point L567-2(lines 567 574) no Hoare annotation was computed. [2023-11-12 02:08:02,530 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2023-11-12 02:08:02,530 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2023-11-12 02:08:02,530 INFO L899 garLoopResultBuilder]: For program point L113(lines 54 117) no Hoare annotation was computed. [2023-11-12 02:08:02,531 INFO L895 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_main_~tmp~7#1| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 (not .cse4) .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse3 .cse5) (and .cse0 .cse4 .cse2 .cse3 .cse5 .cse6 .cse8) (and .cse0 .cse2 .cse7 .cse3 .cse5 .cse8))) [2023-11-12 02:08:02,531 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 640 648) no Hoare annotation was computed. [2023-11-12 02:08:02,531 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 262) no Hoare annotation was computed. [2023-11-12 02:08:02,531 INFO L895 garLoopResultBuilder]: At program point L254(line 254) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1))) (let ((.cse1 (= ~pumpRunning~0 0))) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (and .cse1 (<= ~waterLevel~0 1)))))) [2023-11-12 02:08:02,531 INFO L899 garLoopResultBuilder]: For program point L256-2(lines 249 265) no Hoare annotation was computed. [2023-11-12 02:08:02,531 INFO L899 garLoopResultBuilder]: For program point L254-1(line 254) no Hoare annotation was computed. [2023-11-12 02:08:02,532 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 343) no Hoare annotation was computed. [2023-11-12 02:08:02,532 INFO L895 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1))) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1))))) [2023-11-12 02:08:02,532 INFO L899 garLoopResultBuilder]: For program point L339-2(lines 339 343) no Hoare annotation was computed. [2023-11-12 02:08:02,532 INFO L899 garLoopResultBuilder]: For program point L172(lines 172 180) no Hoare annotation was computed. [2023-11-12 02:08:02,532 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 164 188) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 185) no Hoare annotation was computed. [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 459) no Hoare annotation was computed. [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 449 462) no Hoare annotation was computed. [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 330 348) no Hoare annotation was computed. [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 164 188) no Hoare annotation was computed. [2023-11-12 02:08:02,533 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-12 02:08:02,533 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 164 188) no Hoare annotation was computed. [2023-11-12 02:08:02,534 INFO L899 garLoopResultBuilder]: For program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 241 248) no Hoare annotation was computed. [2023-11-12 02:08:02,534 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 384 395) no Hoare annotation was computed. [2023-11-12 02:08:02,534 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 384 395) the Hoare annotation is: (let ((.cse5 (< 1 |old(~waterLevel~0)|)) (.cse2 (not (= ~pumpRunning~0 1))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse3) (or .cse5 .cse0 .cse2 .cse3) (or .cse6 .cse1 .cse0 .cse3 .cse4))) [2023-11-12 02:08:02,534 INFO L899 garLoopResultBuilder]: For program point L388-1(lines 384 395) no Hoare annotation was computed. [2023-11-12 02:08:02,535 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 274 284) no Hoare annotation was computed. [2023-11-12 02:08:02,535 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 284) the Hoare annotation is: true [2023-11-12 02:08:02,535 INFO L902 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: true [2023-11-12 02:08:02,536 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 274 284) no Hoare annotation was computed. [2023-11-12 02:08:02,536 INFO L899 garLoopResultBuilder]: For program point L279-1(line 279) no Hoare annotation was computed. [2023-11-12 02:08:02,538 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:08:02,540 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2023-11-12 02:08:02,558 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.11 02:08:02 BoogieIcfgContainer [2023-11-12 02:08:02,558 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-12 02:08:02,559 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-12 02:08:02,559 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-12 02:08:02,559 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-12 02:08:02,560 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:07:48" (3/4) ... [2023-11-12 02:08:02,562 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-12 02:08:02,566 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-12 02:08:02,566 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-12 02:08:02,566 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-12 02:08:02,566 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:08:02,567 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-12 02:08:02,583 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2023-11-12 02:08:02,584 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-12 02:08:02,584 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-12 02:08:02,585 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:08:02,586 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:08:02,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0)) && (waterLevel <= 2)) || ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((((tmp == 1) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (pumpRunning == 1))) || ((((((tmp == 1) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) [2023-11-12 02:08:02,684 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0)) && (waterLevel <= 2)) || ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((((tmp == 1) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (pumpRunning == 1))) || ((((((tmp == 1) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) [2023-11-12 02:08:02,744 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/witness.graphml [2023-11-12 02:08:02,745 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/witness.yml [2023-11-12 02:08:02,745 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-12 02:08:02,746 INFO L158 Benchmark]: Toolchain (without parser) took 15533.30ms. Allocated memory was 132.1MB in the beginning and 237.0MB in the end (delta: 104.9MB). Free memory was 85.5MB in the beginning and 109.0MB in the end (delta: -23.5MB). Peak memory consumption was 82.1MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,746 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 109.1MB. Free memory is still 62.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-12 02:08:02,746 INFO L158 Benchmark]: CACSL2BoogieTranslator took 627.92ms. Allocated memory is still 132.1MB. Free memory was 85.2MB in the beginning and 100.1MB in the end (delta: -14.9MB). Peak memory consumption was 24.3MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,747 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.06ms. Allocated memory was 132.1MB in the beginning and 163.6MB in the end (delta: 31.5MB). Free memory was 100.1MB in the beginning and 134.4MB in the end (delta: -34.3MB). Peak memory consumption was 3.0MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,747 INFO L158 Benchmark]: Boogie Preprocessor took 36.76ms. Allocated memory is still 163.6MB. Free memory was 134.4MB in the beginning and 132.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,748 INFO L158 Benchmark]: RCFGBuilder took 703.91ms. Allocated memory is still 163.6MB. Free memory was 132.3MB in the beginning and 113.4MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,748 INFO L158 Benchmark]: TraceAbstraction took 13899.99ms. Allocated memory was 163.6MB in the beginning and 237.0MB in the end (delta: 73.4MB). Free memory was 113.4MB in the beginning and 117.3MB in the end (delta: -3.9MB). Peak memory consumption was 122.2MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,749 INFO L158 Benchmark]: Witness Printer took 185.99ms. Allocated memory is still 237.0MB. Free memory was 117.3MB in the beginning and 109.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-12 02:08:02,751 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 109.1MB. Free memory is still 62.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 627.92ms. Allocated memory is still 132.1MB. Free memory was 85.2MB in the beginning and 100.1MB in the end (delta: -14.9MB). Peak memory consumption was 24.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.06ms. Allocated memory was 132.1MB in the beginning and 163.6MB in the end (delta: 31.5MB). Free memory was 100.1MB in the beginning and 134.4MB in the end (delta: -34.3MB). Peak memory consumption was 3.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.76ms. Allocated memory is still 163.6MB. Free memory was 134.4MB in the beginning and 132.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 703.91ms. Allocated memory is still 163.6MB. Free memory was 132.3MB in the beginning and 113.4MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13899.99ms. Allocated memory was 163.6MB in the beginning and 237.0MB in the end (delta: 73.4MB). Free memory was 113.4MB in the beginning and 117.3MB in the end (delta: -3.9MB). Peak memory consumption was 122.2MB. Max. memory is 16.1GB. * Witness Printer took 185.99ms. Allocated memory is still 237.0MB. Free memory was 117.3MB in the beginning and 109.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 118]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [118] - GenericResultAtLocation [Line: 368]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [368] - GenericResultAtLocation [Line: 472]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [472] - GenericResultAtLocation [Line: 481]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [481] - GenericResultAtLocation [Line: 580]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [580] - GenericResultAtLocation [Line: 614]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [614] - GenericResultAtLocation [Line: 649]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [649] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 477]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.8s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 6.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2505 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2471 mSDsluCounter, 4345 SdHoareTripleChecker+Invalid, 3.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3272 mSDsCounter, 880 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4590 IncrementalHoareTripleChecker+Invalid, 5470 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 880 mSolverCounterUnsat, 1073 mSDtfsCounter, 4590 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 532 GetRequests, 338 SyntacticMatches, 7 SemanticMatches, 187 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2030 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=862occurred in iteration=9, InterpolantAutomatonStates: 169, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 109 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 1428 PreInvPairs, 1580 NumberOfFragments, 930 HoareAnnotationTreeSize, 1428 FomulaSimplifications, 1615 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 30 FomulaSimplificationsInter, 6644 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 681 NumberOfCodeBlocks, 681 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 773 ConstructedInterpolants, 0 QuantifiedInterpolants, 1453 SizeOfPredicates, 4 NumberOfNonLiveVariables, 344 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 99/126 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0)) && (waterLevel <= 2)) || ((((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((((tmp == 1) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (pumpRunning == 1))) || ((((((tmp == 1) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) RESULT: Ultimate proved your program to be correct! [2023-11-12 02:08:02,782 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_05c903a2-2f87-4c42-97e7-f79600de1a18/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE