./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 08:05:49,599 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 08:05:49,676 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-19 08:05:49,682 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 08:05:49,683 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 08:05:49,710 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 08:05:49,711 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 08:05:49,712 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 08:05:49,713 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 08:05:49,713 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 08:05:49,714 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 08:05:49,715 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 08:05:49,716 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 08:05:49,716 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 08:05:49,717 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 08:05:49,718 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 08:05:49,718 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 08:05:49,719 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 08:05:49,719 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 08:05:49,720 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 08:05:49,720 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 08:05:49,725 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 08:05:49,725 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 08:05:49,726 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 08:05:49,727 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 08:05:49,727 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 08:05:49,728 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 08:05:49,731 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 08:05:49,732 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 08:05:49,733 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 08:05:49,733 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 08:05:49,733 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 08:05:49,734 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 08:05:49,734 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 08:05:49,735 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-19 08:05:49,735 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 08:05:49,736 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-19 08:05:49,736 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 08:05:49,736 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-19 08:05:49,737 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 [2023-11-19 08:05:50,062 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 08:05:50,085 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 08:05:50,088 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 08:05:50,089 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 08:05:50,090 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 08:05:50,091 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2023-11-19 08:05:53,296 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 08:05:53,551 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 08:05:53,551 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2023-11-19 08:05:53,569 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/data/54ffbff18/eb96a40fb66e47caa2f2e5fed9319985/FLAG435bae7e3 [2023-11-19 08:05:53,594 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/data/54ffbff18/eb96a40fb66e47caa2f2e5fed9319985 [2023-11-19 08:05:53,607 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 08:05:53,609 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 08:05:53,613 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 08:05:53,614 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 08:05:53,620 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 08:05:53,621 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:05:53" (1/1) ... [2023-11-19 08:05:53,623 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d8dbcd9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:53, skipping insertion in model container [2023-11-19 08:05:53,623 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:05:53" (1/1) ... [2023-11-19 08:05:53,712 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 08:05:54,028 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2023-11-19 08:05:54,039 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 08:05:54,053 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 08:05:54,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-19 08:05:54,067 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [150] [2023-11-19 08:05:54,067 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [188] [2023-11-19 08:05:54,068 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [261] [2023-11-19 08:05:54,068 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [484] [2023-11-19 08:05:54,068 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [524] [2023-11-19 08:05:54,069 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [890] [2023-11-19 08:05:54,069 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [899] [2023-11-19 08:05:54,187 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2023-11-19 08:05:54,196 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 08:05:54,225 INFO L206 MainTranslator]: Completed translation [2023-11-19 08:05:54,226 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54 WrapperNode [2023-11-19 08:05:54,226 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 08:05:54,228 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 08:05:54,228 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 08:05:54,228 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 08:05:54,237 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,263 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,306 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 199 [2023-11-19 08:05:54,306 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 08:05:54,307 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 08:05:54,308 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 08:05:54,308 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 08:05:54,319 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,319 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,328 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,340 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,346 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,351 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,356 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,359 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,361 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 08:05:54,369 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 08:05:54,370 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 08:05:54,371 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 08:05:54,372 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (1/1) ... [2023-11-19 08:05:54,378 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 08:05:54,393 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 08:05:54,407 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 08:05:54,424 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 08:05:54,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 08:05:54,458 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 08:05:54,458 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 08:05:54,459 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 08:05:54,461 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 08:05:54,461 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 08:05:54,461 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 08:05:54,462 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-19 08:05:54,462 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-19 08:05:54,462 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 08:05:54,462 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 08:05:54,463 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 08:05:54,463 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 08:05:54,463 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-19 08:05:54,463 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-19 08:05:54,464 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 08:05:54,465 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 08:05:54,465 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 08:05:54,466 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 08:05:54,466 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 08:05:54,466 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 08:05:54,466 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 08:05:54,619 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 08:05:54,622 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 08:05:54,976 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 08:05:54,986 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 08:05:54,987 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 08:05:54,991 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:05:54 BoogieIcfgContainer [2023-11-19 08:05:54,991 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 08:05:54,998 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 08:05:54,998 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 08:05:55,000 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 08:05:55,001 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 08:05:53" (1/3) ... [2023-11-19 08:05:55,002 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5bda63a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:05:55, skipping insertion in model container [2023-11-19 08:05:55,002 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:05:54" (2/3) ... [2023-11-19 08:05:55,002 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5bda63a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:05:55, skipping insertion in model container [2023-11-19 08:05:55,002 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:05:54" (3/3) ... [2023-11-19 08:05:55,004 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product48.cil.c [2023-11-19 08:05:55,021 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 08:05:55,022 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 08:05:55,079 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 08:05:55,086 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@78cc0081, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-19 08:05:55,086 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 08:05:55,091 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-19 08:05:55,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-19 08:05:55,103 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:55,104 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:55,104 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:55,111 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:55,111 INFO L85 PathProgramCache]: Analyzing trace with hash 1420238352, now seen corresponding path program 1 times [2023-11-19 08:05:55,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:55,123 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778946364] [2023-11-19 08:05:55,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:55,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:55,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:55,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-19 08:05:55,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:55,310 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:05:55,311 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:55,311 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778946364] [2023-11-19 08:05:55,312 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [778946364] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:55,312 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:55,313 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 08:05:55,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692649677] [2023-11-19 08:05:55,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:55,321 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 08:05:55,321 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:55,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 08:05:55,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 08:05:55,357 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:55,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:55,399 INFO L93 Difference]: Finished difference Result 197 states and 266 transitions. [2023-11-19 08:05:55,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 08:05:55,401 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-19 08:05:55,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:55,413 INFO L225 Difference]: With dead ends: 197 [2023-11-19 08:05:55,413 INFO L226 Difference]: Without dead ends: 94 [2023-11-19 08:05:55,418 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 08:05:55,422 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:55,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 08:05:55,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-11-19 08:05:55,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2023-11-19 08:05:55,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-19 08:05:55,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 121 transitions. [2023-11-19 08:05:55,483 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 121 transitions. Word has length 25 [2023-11-19 08:05:55,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:55,484 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 121 transitions. [2023-11-19 08:05:55,484 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:55,485 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 121 transitions. [2023-11-19 08:05:55,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-19 08:05:55,487 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:55,488 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:55,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 08:05:55,488 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:55,489 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:55,489 INFO L85 PathProgramCache]: Analyzing trace with hash -193757144, now seen corresponding path program 1 times [2023-11-19 08:05:55,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:55,490 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1349018967] [2023-11-19 08:05:55,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:55,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:55,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:55,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-19 08:05:55,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:55,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:05:55,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:55,627 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1349018967] [2023-11-19 08:05:55,627 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1349018967] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:55,627 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:55,627 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:05:55,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164936481] [2023-11-19 08:05:55,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:55,629 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 08:05:55,629 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:55,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 08:05:55,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 08:05:55,631 INFO L87 Difference]: Start difference. First operand 94 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:55,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:55,652 INFO L93 Difference]: Finished difference Result 148 states and 190 transitions. [2023-11-19 08:05:55,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 08:05:55,653 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-19 08:05:55,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:55,655 INFO L225 Difference]: With dead ends: 148 [2023-11-19 08:05:55,655 INFO L226 Difference]: Without dead ends: 85 [2023-11-19 08:05:55,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 08:05:55,658 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 17 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:55,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 08:05:55,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2023-11-19 08:05:55,671 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2023-11-19 08:05:55,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-19 08:05:55,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2023-11-19 08:05:55,673 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 26 [2023-11-19 08:05:55,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:55,674 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2023-11-19 08:05:55,674 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:55,674 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2023-11-19 08:05:55,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-19 08:05:55,676 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:55,676 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:55,676 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 08:05:55,677 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:55,677 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:55,677 INFO L85 PathProgramCache]: Analyzing trace with hash -150671396, now seen corresponding path program 1 times [2023-11-19 08:05:55,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:55,678 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806270802] [2023-11-19 08:05:55,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:55,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:55,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-19 08:05:56,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:05:56,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:56,036 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806270802] [2023-11-19 08:05:56,036 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806270802] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:56,036 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:56,036 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 08:05:56,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226556129] [2023-11-19 08:05:56,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:56,037 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 08:05:56,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:56,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 08:05:56,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-19 08:05:56,039 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:56,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:56,362 INFO L93 Difference]: Finished difference Result 296 states and 393 transitions. [2023-11-19 08:05:56,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 08:05:56,363 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-19 08:05:56,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:56,371 INFO L225 Difference]: With dead ends: 296 [2023-11-19 08:05:56,372 INFO L226 Difference]: Without dead ends: 219 [2023-11-19 08:05:56,376 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-19 08:05:56,377 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 242 mSDsluCounter, 409 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:56,378 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 527 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 08:05:56,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2023-11-19 08:05:56,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 197. [2023-11-19 08:05:56,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 144 states have (on average 1.3541666666666667) internal successors, (195), 162 states have internal predecessors, (195), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 23 states have call predecessors, (32), 31 states have call successors, (32) [2023-11-19 08:05:56,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 258 transitions. [2023-11-19 08:05:56,434 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 258 transitions. Word has length 31 [2023-11-19 08:05:56,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:56,435 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 258 transitions. [2023-11-19 08:05:56,435 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:56,435 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 258 transitions. [2023-11-19 08:05:56,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-19 08:05:56,445 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:56,445 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:56,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 08:05:56,447 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:56,448 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:56,448 INFO L85 PathProgramCache]: Analyzing trace with hash 153261204, now seen corresponding path program 1 times [2023-11-19 08:05:56,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:56,449 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [471040455] [2023-11-19 08:05:56,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:56,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:56,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-19 08:05:56,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:05:56,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:56,566 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [471040455] [2023-11-19 08:05:56,566 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [471040455] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:56,566 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:56,567 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 08:05:56,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [325505860] [2023-11-19 08:05:56,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:56,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 08:05:56,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:56,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 08:05:56,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 08:05:56,569 INFO L87 Difference]: Start difference. First operand 197 states and 258 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:56,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:56,650 INFO L93 Difference]: Finished difference Result 485 states and 645 transitions. [2023-11-19 08:05:56,651 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 08:05:56,651 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-19 08:05:56,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:56,654 INFO L225 Difference]: With dead ends: 485 [2023-11-19 08:05:56,654 INFO L226 Difference]: Without dead ends: 296 [2023-11-19 08:05:56,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-19 08:05:56,662 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 65 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:56,665 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 383 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 08:05:56,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2023-11-19 08:05:56,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 283. [2023-11-19 08:05:56,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 208 states have (on average 1.2884615384615385) internal successors, (268), 227 states have internal predecessors, (268), 40 states have call successors, (40), 34 states have call predecessors, (40), 34 states have return successors, (50), 37 states have call predecessors, (50), 40 states have call successors, (50) [2023-11-19 08:05:56,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 358 transitions. [2023-11-19 08:05:56,709 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 358 transitions. Word has length 34 [2023-11-19 08:05:56,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:56,710 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 358 transitions. [2023-11-19 08:05:56,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 08:05:56,710 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 358 transitions. [2023-11-19 08:05:56,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-19 08:05:56,713 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:56,713 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:56,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 08:05:56,713 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:56,714 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:56,714 INFO L85 PathProgramCache]: Analyzing trace with hash -622748863, now seen corresponding path program 1 times [2023-11-19 08:05:56,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:56,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504548906] [2023-11-19 08:05:56,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:56,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:56,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-19 08:05:56,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 08:05:56,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:56,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 08:05:56,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:56,974 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 08:05:56,974 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:56,975 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504548906] [2023-11-19 08:05:56,975 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504548906] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:56,975 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:56,975 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 08:05:56,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1007471522] [2023-11-19 08:05:56,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:56,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 08:05:56,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:56,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 08:05:56,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 08:05:56,980 INFO L87 Difference]: Start difference. First operand 283 states and 358 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 08:05:57,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:57,208 INFO L93 Difference]: Finished difference Result 622 states and 809 transitions. [2023-11-19 08:05:57,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 08:05:57,209 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-19 08:05:57,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:57,212 INFO L225 Difference]: With dead ends: 622 [2023-11-19 08:05:57,213 INFO L226 Difference]: Without dead ends: 347 [2023-11-19 08:05:57,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-19 08:05:57,216 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 66 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:57,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 359 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 08:05:57,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2023-11-19 08:05:57,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 335. [2023-11-19 08:05:57,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 335 states, 250 states have (on average 1.272) internal successors, (318), 269 states have internal predecessors, (318), 44 states have call successors, (44), 34 states have call predecessors, (44), 40 states have return successors, (60), 45 states have call predecessors, (60), 44 states have call successors, (60) [2023-11-19 08:05:57,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 335 states to 335 states and 422 transitions. [2023-11-19 08:05:57,254 INFO L78 Accepts]: Start accepts. Automaton has 335 states and 422 transitions. Word has length 57 [2023-11-19 08:05:57,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:57,254 INFO L495 AbstractCegarLoop]: Abstraction has 335 states and 422 transitions. [2023-11-19 08:05:57,255 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 08:05:57,255 INFO L276 IsEmpty]: Start isEmpty. Operand 335 states and 422 transitions. [2023-11-19 08:05:57,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-19 08:05:57,256 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:57,257 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:57,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 08:05:57,257 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:57,258 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:57,258 INFO L85 PathProgramCache]: Analyzing trace with hash 78851011, now seen corresponding path program 1 times [2023-11-19 08:05:57,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:57,258 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373806199] [2023-11-19 08:05:57,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:57,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:57,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-19 08:05:57,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 08:05:57,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:57,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 08:05:57,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,387 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 08:05:57,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:57,388 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [373806199] [2023-11-19 08:05:57,388 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [373806199] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:57,388 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:57,389 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 08:05:57,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [68430193] [2023-11-19 08:05:57,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:57,390 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-19 08:05:57,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:57,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 08:05:57,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-19 08:05:57,391 INFO L87 Difference]: Start difference. First operand 335 states and 422 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 08:05:57,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:57,636 INFO L93 Difference]: Finished difference Result 680 states and 877 transitions. [2023-11-19 08:05:57,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 08:05:57,637 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-19 08:05:57,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:57,640 INFO L225 Difference]: With dead ends: 680 [2023-11-19 08:05:57,640 INFO L226 Difference]: Without dead ends: 353 [2023-11-19 08:05:57,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2023-11-19 08:05:57,643 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 110 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:57,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 390 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 08:05:57,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 353 states. [2023-11-19 08:05:57,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 339. [2023-11-19 08:05:57,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 339 states, 254 states have (on average 1.2677165354330708) internal successors, (322), 273 states have internal predecessors, (322), 44 states have call successors, (44), 34 states have call predecessors, (44), 40 states have return successors, (60), 45 states have call predecessors, (60), 44 states have call successors, (60) [2023-11-19 08:05:57,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 339 states to 339 states and 426 transitions. [2023-11-19 08:05:57,677 INFO L78 Accepts]: Start accepts. Automaton has 339 states and 426 transitions. Word has length 57 [2023-11-19 08:05:57,677 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:57,677 INFO L495 AbstractCegarLoop]: Abstraction has 339 states and 426 transitions. [2023-11-19 08:05:57,677 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 08:05:57,677 INFO L276 IsEmpty]: Start isEmpty. Operand 339 states and 426 transitions. [2023-11-19 08:05:57,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-19 08:05:57,679 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:57,679 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:57,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 08:05:57,679 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:57,680 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:57,680 INFO L85 PathProgramCache]: Analyzing trace with hash 6464453, now seen corresponding path program 1 times [2023-11-19 08:05:57,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:57,680 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [410104822] [2023-11-19 08:05:57,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:57,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:57,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-19 08:05:57,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 08:05:57,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:57,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 08:05:57,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:57,786 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 08:05:57,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:57,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [410104822] [2023-11-19 08:05:57,787 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [410104822] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:57,787 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:57,787 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 08:05:57,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [387646190] [2023-11-19 08:05:57,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:57,788 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 08:05:57,791 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:57,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 08:05:57,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 08:05:57,793 INFO L87 Difference]: Start difference. First operand 339 states and 426 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 08:05:58,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:58,077 INFO L93 Difference]: Finished difference Result 983 states and 1285 transitions. [2023-11-19 08:05:58,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 08:05:58,078 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 57 [2023-11-19 08:05:58,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:58,086 INFO L225 Difference]: With dead ends: 983 [2023-11-19 08:05:58,086 INFO L226 Difference]: Without dead ends: 652 [2023-11-19 08:05:58,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-19 08:05:58,090 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 227 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:58,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 302 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 08:05:58,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2023-11-19 08:05:58,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 645. [2023-11-19 08:05:58,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 645 states, 485 states have (on average 1.245360824742268) internal successors, (604), 516 states have internal predecessors, (604), 83 states have call successors, (83), 75 states have call predecessors, (83), 76 states have return successors, (128), 81 states have call predecessors, (128), 83 states have call successors, (128) [2023-11-19 08:05:58,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 645 states to 645 states and 815 transitions. [2023-11-19 08:05:58,174 INFO L78 Accepts]: Start accepts. Automaton has 645 states and 815 transitions. Word has length 57 [2023-11-19 08:05:58,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:58,175 INFO L495 AbstractCegarLoop]: Abstraction has 645 states and 815 transitions. [2023-11-19 08:05:58,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 08:05:58,176 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 815 transitions. [2023-11-19 08:05:58,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-19 08:05:58,178 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:58,178 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:58,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 08:05:58,179 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:58,179 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:58,179 INFO L85 PathProgramCache]: Analyzing trace with hash -681836693, now seen corresponding path program 1 times [2023-11-19 08:05:58,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:58,180 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170096044] [2023-11-19 08:05:58,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:58,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:58,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 08:05:58,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-19 08:05:58,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 08:05:58,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:58,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-19 08:05:58,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:58,423 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 08:05:58,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:58,424 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170096044] [2023-11-19 08:05:58,424 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170096044] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:05:58,424 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:05:58,424 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-19 08:05:58,425 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [152047520] [2023-11-19 08:05:58,425 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:05:58,425 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-19 08:05:58,426 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:05:58,426 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-19 08:05:58,426 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-19 08:05:58,427 INFO L87 Difference]: Start difference. First operand 645 states and 815 transitions. Second operand has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 08:05:59,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:05:59,423 INFO L93 Difference]: Finished difference Result 2068 states and 2729 transitions. [2023-11-19 08:05:59,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-19 08:05:59,424 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2023-11-19 08:05:59,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:05:59,434 INFO L225 Difference]: With dead ends: 2068 [2023-11-19 08:05:59,434 INFO L226 Difference]: Without dead ends: 1431 [2023-11-19 08:05:59,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-19 08:05:59,439 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 330 mSDsluCounter, 511 mSDsCounter, 0 mSdLazyCounter, 643 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 774 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 643 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-19 08:05:59,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 579 Invalid, 774 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 643 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-19 08:05:59,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1431 states. [2023-11-19 08:05:59,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1431 to 1372. [2023-11-19 08:05:59,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1372 states, 1013 states have (on average 1.2092793682132281) internal successors, (1225), 1090 states have internal predecessors, (1225), 192 states have call successors, (192), 146 states have call predecessors, (192), 166 states have return successors, (335), 188 states have call predecessors, (335), 192 states have call successors, (335) [2023-11-19 08:05:59,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1372 states to 1372 states and 1752 transitions. [2023-11-19 08:05:59,592 INFO L78 Accepts]: Start accepts. Automaton has 1372 states and 1752 transitions. Word has length 61 [2023-11-19 08:05:59,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:05:59,592 INFO L495 AbstractCegarLoop]: Abstraction has 1372 states and 1752 transitions. [2023-11-19 08:05:59,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 7 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 08:05:59,593 INFO L276 IsEmpty]: Start isEmpty. Operand 1372 states and 1752 transitions. [2023-11-19 08:05:59,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-19 08:05:59,599 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 08:05:59,599 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:05:59,600 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-19 08:05:59,600 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 08:05:59,600 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:05:59,601 INFO L85 PathProgramCache]: Analyzing trace with hash 1582774687, now seen corresponding path program 1 times [2023-11-19 08:05:59,601 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:05:59,601 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1993129105] [2023-11-19 08:05:59,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:59,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:05:59,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 08:05:59,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-19 08:05:59,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-19 08:05:59,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-19 08:05:59,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:59,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-19 08:05:59,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-19 08:05:59,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-19 08:05:59,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 08:05:59,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-19 08:05:59,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 08:05:59,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2023-11-19 08:05:59,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:05:59,993 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-19 08:05:59,993 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:05:59,993 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1993129105] [2023-11-19 08:05:59,994 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1993129105] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 08:05:59,994 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [602824233] [2023-11-19 08:05:59,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:05:59,994 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 08:05:59,994 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 08:06:00,000 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 08:06:00,010 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 08:06:00,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:06:00,130 INFO L262 TraceCheckSpWp]: Trace formula consists of 364 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-19 08:06:00,143 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 08:06:00,399 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-19 08:06:00,399 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-19 08:06:00,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [602824233] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:06:00,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-19 08:06:00,400 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2023-11-19 08:06:00,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045393273] [2023-11-19 08:06:00,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:06:00,401 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-19 08:06:00,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:06:00,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 08:06:00,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2023-11-19 08:06:00,403 INFO L87 Difference]: Start difference. First operand 1372 states and 1752 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-19 08:06:00,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:06:00,699 INFO L93 Difference]: Finished difference Result 3054 states and 3891 transitions. [2023-11-19 08:06:00,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 08:06:00,700 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2023-11-19 08:06:00,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 08:06:00,701 INFO L225 Difference]: With dead ends: 3054 [2023-11-19 08:06:00,701 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 08:06:00,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2023-11-19 08:06:00,711 INFO L413 NwaCegarLoop]: 185 mSDtfsCounter, 67 mSDsluCounter, 836 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 1021 SdHoareTripleChecker+Invalid, 120 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 08:06:00,711 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 1021 Invalid, 120 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 08:06:00,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 08:06:00,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 08:06:00,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:06:00,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 08:06:00,713 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2023-11-19 08:06:00,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 08:06:00,714 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 08:06:00,714 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2023-11-19 08:06:00,714 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 08:06:00,714 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 08:06:00,717 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 08:06:00,739 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 08:06:00,932 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 08:06:00,934 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 08:06:04,533 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 378 385) no Hoare annotation was computed. [2023-11-19 08:06:04,533 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 378 385) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-19 08:06:04,533 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 378 385) no Hoare annotation was computed. [2023-11-19 08:06:04,533 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 294 300) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 294 300) the Hoare annotation is: true [2023-11-19 08:06:04,534 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (< |old(~methaneLevelCritical~0)| 1)))) [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 901 930) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point L926(lines 901 930) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point L922(line 922) no Hoare annotation was computed. [2023-11-19 08:06:04,534 INFO L899 garLoopResultBuilder]: For program point L915(lines 915 919) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L902 garLoopResultBuilder]: At program point L915-1(lines 915 919) the Hoare annotation is: true [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L902 garLoopResultBuilder]: At program point L911-2(lines 911 925) the Hoare annotation is: true [2023-11-19 08:06:04,535 INFO L902 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: true [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 901 930) the Hoare annotation is: true [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 270 293) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point L895(line 895) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 517) no Hoare annotation was computed. [2023-11-19 08:06:04,535 INFO L899 garLoopResultBuilder]: For program point L503(lines 503 520) no Hoare annotation was computed. [2023-11-19 08:06:04,536 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse0 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-19 08:06:04,536 INFO L899 garLoopResultBuilder]: For program point L503-1(lines 495 523) no Hoare annotation was computed. [2023-11-19 08:06:04,536 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse3 .cse4) (or .cse0 .cse4) (or .cse2 .cse1 .cse3))) [2023-11-19 08:06:04,536 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse2 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse4 .cse2))) [2023-11-19 08:06:04,537 INFO L899 garLoopResultBuilder]: For program point L334-1(line 334) no Hoare annotation was computed. [2023-11-19 08:06:04,537 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 514) no Hoare annotation was computed. [2023-11-19 08:06:04,537 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not .cse4)) (.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not .cse9)) (.cse2 (and .cse6 .cse9 .cse3 .cse7 .cse8)) (.cse0 (not .cse3)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse4) (or .cse0 (and .cse6 .cse7 .cse8) .cse5))))) [2023-11-19 08:06:04,537 INFO L899 garLoopResultBuilder]: For program point L347-1(lines 328 352) no Hoare annotation was computed. [2023-11-19 08:06:04,537 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2023-11-19 08:06:04,538 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 891 898) no Hoare annotation was computed. [2023-11-19 08:06:04,538 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 270 293) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse5) (or .cse3 .cse4 .cse0)))) [2023-11-19 08:06:04,538 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-19 08:06:04,538 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-19 08:06:04,539 INFO L895 garLoopResultBuilder]: At program point L501(line 501) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse6 .cse3)) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (and .cse3 (not .cse4)) .cse1 .cse5) (or .cse6 .cse4 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 2 ~waterLevel~0) .cse5 .cse4)))) [2023-11-19 08:06:04,539 INFO L899 garLoopResultBuilder]: For program point L501-1(line 501) no Hoare annotation was computed. [2023-11-19 08:06:04,539 INFO L899 garLoopResultBuilder]: For program point L274-1(lines 273 292) no Hoare annotation was computed. [2023-11-19 08:06:04,539 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 344) no Hoare annotation was computed. [2023-11-19 08:06:04,539 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 349) no Hoare annotation was computed. [2023-11-19 08:06:04,539 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 270 293) no Hoare annotation was computed. [2023-11-19 08:06:04,540 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 397 405) no Hoare annotation was computed. [2023-11-19 08:06:04,540 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 895) no Hoare annotation was computed. [2023-11-19 08:06:04,540 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-19 08:06:04,540 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2023-11-19 08:06:04,540 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-19 08:06:04,541 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-19 08:06:04,541 INFO L899 garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 476 483) no Hoare annotation was computed. [2023-11-19 08:06:04,541 INFO L895 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-19 08:06:04,541 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2023-11-19 08:06:04,541 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point L465(lines 465 471) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point L465-1(lines 465 471) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 962 972) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 165 171) no Hoare annotation was computed. [2023-11-19 08:06:04,542 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 973 995) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 955 961) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point L256(lines 193 260) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2023-11-19 08:06:04,543 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2023-11-19 08:06:04,544 INFO L899 garLoopResultBuilder]: For program point L983(lines 983 990) no Hoare annotation was computed. [2023-11-19 08:06:04,544 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4))) [2023-11-19 08:06:04,544 INFO L899 garLoopResultBuilder]: For program point L983-2(lines 983 990) no Hoare annotation was computed. [2023-11-19 08:06:04,544 INFO L895 garLoopResultBuilder]: At program point L467(line 467) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2023-11-19 08:06:04,544 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 08:06:04,545 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 172 178) no Hoare annotation was computed. [2023-11-19 08:06:04,545 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 487 494) no Hoare annotation was computed. [2023-11-19 08:06:04,545 INFO L895 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2023-11-19 08:06:04,545 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 461 475) no Hoare annotation was computed. [2023-11-19 08:06:04,545 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2023-11-19 08:06:04,546 INFO L895 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse6 .cse2 .cse3 .cse4 .cse5))) [2023-11-19 08:06:04,546 INFO L899 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2023-11-19 08:06:04,546 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 179 187) no Hoare annotation was computed. [2023-11-19 08:06:04,546 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2023-11-19 08:06:04,546 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-19 08:06:04,546 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-19 08:06:04,547 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1))) [2023-11-19 08:06:04,547 INFO L895 garLoopResultBuilder]: At program point L316(line 316) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 0) .cse0 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0) (not .cse2)))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2)))) [2023-11-19 08:06:04,547 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 318) no Hoare annotation was computed. [2023-11-19 08:06:04,547 INFO L899 garLoopResultBuilder]: For program point L306(lines 306 323) no Hoare annotation was computed. [2023-11-19 08:06:04,547 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 374) no Hoare annotation was computed. [2023-11-19 08:06:04,548 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0))) (and (or (not .cse0) (and .cse1 .cse2) .cse3 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse0) .cse3))) [2023-11-19 08:06:04,548 INFO L899 garLoopResultBuilder]: For program point L368-2(lines 361 377) no Hoare annotation was computed. [2023-11-19 08:06:04,548 INFO L899 garLoopResultBuilder]: For program point L366-1(line 366) no Hoare annotation was computed. [2023-11-19 08:06:04,548 INFO L899 garLoopResultBuilder]: For program point activatePump__wrappee__highWaterSensor_returnLabel#1(lines 353 360) no Hoare annotation was computed. [2023-11-19 08:06:04,548 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 302 326) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-19 08:06:04,548 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 455) no Hoare annotation was computed. [2023-11-19 08:06:04,549 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 136 149) no Hoare annotation was computed. [2023-11-19 08:06:04,549 INFO L899 garLoopResultBuilder]: For program point L451-2(lines 451 455) no Hoare annotation was computed. [2023-11-19 08:06:04,549 INFO L895 garLoopResultBuilder]: At program point L321(line 321) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-19 08:06:04,549 INFO L899 garLoopResultBuilder]: For program point L321-1(lines 302 326) no Hoare annotation was computed. [2023-11-19 08:06:04,549 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 442 460) no Hoare annotation was computed. [2023-11-19 08:06:04,550 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-19 08:06:04,550 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 302 326) no Hoare annotation was computed. [2023-11-19 08:06:04,550 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 386 396) no Hoare annotation was computed. [2023-11-19 08:06:04,550 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 386 396) the Hoare annotation is: true [2023-11-19 08:06:04,550 INFO L902 garLoopResultBuilder]: At program point L391(line 391) the Hoare annotation is: true [2023-11-19 08:06:04,550 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 386 396) no Hoare annotation was computed. [2023-11-19 08:06:04,550 INFO L899 garLoopResultBuilder]: For program point L391-1(line 391) no Hoare annotation was computed. [2023-11-19 08:06:04,553 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:06:04,556 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 08:06:04,569 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 08:06:04 BoogieIcfgContainer [2023-11-19 08:06:04,569 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 08:06:04,570 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 08:06:04,570 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 08:06:04,570 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 08:06:04,571 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:05:54" (3/4) ... [2023-11-19 08:06:04,573 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 08:06:04,577 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 08:06:04,577 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 08:06:04,577 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 08:06:04,577 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 08:06:04,578 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 08:06:04,578 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-19 08:06:04,578 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 08:06:04,578 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-19 08:06:04,578 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-19 08:06:04,586 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-19 08:06:04,587 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-19 08:06:04,587 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 08:06:04,588 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 08:06:04,589 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 08:06:04,617 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-19 08:06:04,648 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-19 08:06:04,704 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml [2023-11-19 08:06:04,707 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/witness.yml [2023-11-19 08:06:04,707 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 08:06:04,708 INFO L158 Benchmark]: Toolchain (without parser) took 11098.69ms. Allocated memory was 130.0MB in the beginning and 226.5MB in the end (delta: 96.5MB). Free memory was 83.3MB in the beginning and 175.3MB in the end (delta: -92.1MB). Peak memory consumption was 6.1MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,708 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 100.7MB. Free memory is still 74.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 08:06:04,709 INFO L158 Benchmark]: CACSL2BoogieTranslator took 613.61ms. Allocated memory is still 130.0MB. Free memory was 82.9MB in the beginning and 63.3MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,709 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.86ms. Allocated memory is still 130.0MB. Free memory was 63.3MB in the beginning and 61.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,709 INFO L158 Benchmark]: Boogie Preprocessor took 60.88ms. Allocated memory is still 130.0MB. Free memory was 61.2MB in the beginning and 59.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,710 INFO L158 Benchmark]: RCFGBuilder took 622.38ms. Allocated memory is still 130.0MB. Free memory was 59.4MB in the beginning and 92.3MB in the end (delta: -32.8MB). Peak memory consumption was 15.0MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,711 INFO L158 Benchmark]: TraceAbstraction took 9571.74ms. Allocated memory was 130.0MB in the beginning and 226.5MB in the end (delta: 96.5MB). Free memory was 91.6MB in the beginning and 182.7MB in the end (delta: -91.1MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,711 INFO L158 Benchmark]: Witness Printer took 137.58ms. Allocated memory is still 226.5MB. Free memory was 182.7MB in the beginning and 175.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-19 08:06:04,714 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 100.7MB. Free memory is still 74.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 613.61ms. Allocated memory is still 130.0MB. Free memory was 82.9MB in the beginning and 63.3MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 78.86ms. Allocated memory is still 130.0MB. Free memory was 63.3MB in the beginning and 61.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.88ms. Allocated memory is still 130.0MB. Free memory was 61.2MB in the beginning and 59.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 622.38ms. Allocated memory is still 130.0MB. Free memory was 59.4MB in the beginning and 92.3MB in the end (delta: -32.8MB). Peak memory consumption was 15.0MB. Max. memory is 16.1GB. * TraceAbstraction took 9571.74ms. Allocated memory was 130.0MB in the beginning and 226.5MB in the end (delta: 96.5MB). Free memory was 91.6MB in the beginning and 182.7MB in the end (delta: -91.1MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. * Witness Printer took 137.58ms. Allocated memory is still 226.5MB. Free memory was 182.7MB in the beginning and 175.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [150] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [188] - GenericResultAtLocation [Line: 261]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [261] - GenericResultAtLocation [Line: 484]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [484] - GenericResultAtLocation [Line: 524]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [524] - GenericResultAtLocation [Line: 890]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [890] - GenericResultAtLocation [Line: 899]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [899] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 895]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.5s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1159 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1124 mSDsluCounter, 3885 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2881 mSDsCounter, 277 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1393 IncrementalHoareTripleChecker+Invalid, 1670 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 277 mSolverCounterUnsat, 1004 mSDtfsCounter, 1393 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 272 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 310 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1372occurred in iteration=8, InterpolantAutomatonStates: 75, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 9 MinimizatonAttempts, 127 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1501 PreInvPairs, 1893 NumberOfFragments, 826 HoareAnnotationTreeSize, 1501 FomulaSimplifications, 5027 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 27 FomulaSimplificationsInter, 12626 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 568 NumberOfCodeBlocks, 568 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 558 ConstructedInterpolants, 0 QuantifiedInterpolants, 954 SizeOfPredicates, 3 NumberOfNonLiveVariables, 364 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 10 InterpolantComputations, 9 PerfectInterpolantSequences, 99/102 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2023-11-19 08:06:04,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_50825d07-ed6c-4924-9d66-3488a8175df8/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE