./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bed571a327ae9eee0b2e62daa6070780d20555ec322abcda9e725c1fa87edc9c --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 07:38:06,925 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 07:38:07,062 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-19 07:38:07,077 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 07:38:07,078 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 07:38:07,125 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 07:38:07,126 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 07:38:07,127 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 07:38:07,128 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 07:38:07,134 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 07:38:07,135 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 07:38:07,136 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 07:38:07,137 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 07:38:07,139 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 07:38:07,139 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 07:38:07,140 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 07:38:07,141 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 07:38:07,141 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 07:38:07,142 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 07:38:07,142 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 07:38:07,143 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 07:38:07,144 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 07:38:07,144 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 07:38:07,145 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 07:38:07,145 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 07:38:07,146 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 07:38:07,147 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 07:38:07,148 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 07:38:07,148 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:38:07,149 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 07:38:07,150 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 07:38:07,151 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 07:38:07,151 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 07:38:07,151 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 07:38:07,152 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-19 07:38:07,152 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 07:38:07,152 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-19 07:38:07,153 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 07:38:07,153 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-19 07:38:07,153 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bed571a327ae9eee0b2e62daa6070780d20555ec322abcda9e725c1fa87edc9c [2023-11-19 07:38:07,504 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 07:38:07,534 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 07:38:07,538 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 07:38:07,540 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 07:38:07,540 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 07:38:07,542 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c [2023-11-19 07:38:10,761 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 07:38:11,034 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 07:38:11,035 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c [2023-11-19 07:38:11,050 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/data/422c10a7a/3b96065a4fd44f6991505a98d8405288/FLAG81eb07061 [2023-11-19 07:38:11,066 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/data/422c10a7a/3b96065a4fd44f6991505a98d8405288 [2023-11-19 07:38:11,068 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 07:38:11,070 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 07:38:11,078 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 07:38:11,092 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 07:38:11,097 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 07:38:11,098 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,099 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@19a937cc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11, skipping insertion in model container [2023-11-19 07:38:11,099 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,151 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 07:38:11,502 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c[17002,17015] [2023-11-19 07:38:11,545 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:38:11,562 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 07:38:11,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-19 07:38:11,574 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [160] [2023-11-19 07:38:11,575 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [230] [2023-11-19 07:38:11,575 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [469] [2023-11-19 07:38:11,575 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [835] [2023-11-19 07:38:11,575 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [844] [2023-11-19 07:38:11,576 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [893] [2023-11-19 07:38:11,576 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [993] [2023-11-19 07:38:11,658 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c[17002,17015] [2023-11-19 07:38:11,664 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:38:11,686 INFO L206 MainTranslator]: Completed translation [2023-11-19 07:38:11,686 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11 WrapperNode [2023-11-19 07:38:11,687 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 07:38:11,689 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 07:38:11,690 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 07:38:11,690 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 07:38:11,698 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,716 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,751 INFO L138 Inliner]: procedures = 59, calls = 105, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 235 [2023-11-19 07:38:11,751 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 07:38:11,752 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 07:38:11,752 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 07:38:11,752 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 07:38:11,770 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,770 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,774 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,783 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,792 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,797 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,799 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,801 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,809 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 07:38:11,810 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 07:38:11,810 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 07:38:11,821 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 07:38:11,822 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (1/1) ... [2023-11-19 07:38:11,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:38:11,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:38:11,853 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 07:38:11,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 07:38:11,883 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 07:38:11,883 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 07:38:11,883 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 07:38:11,883 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 07:38:11,884 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 07:38:11,884 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 07:38:11,884 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 07:38:11,884 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:38:11,884 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:38:11,885 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 07:38:11,885 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 07:38:11,885 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-19 07:38:11,885 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-19 07:38:11,886 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 07:38:11,886 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 07:38:11,886 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 07:38:11,886 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 07:38:11,886 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 07:38:11,887 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 07:38:11,887 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 07:38:11,987 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 07:38:11,990 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 07:38:12,343 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 07:38:12,353 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 07:38:12,353 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 07:38:12,358 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:38:12 BoogieIcfgContainer [2023-11-19 07:38:12,358 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 07:38:12,361 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 07:38:12,362 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 07:38:12,365 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 07:38:12,366 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:38:11" (1/3) ... [2023-11-19 07:38:12,366 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fc93c54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:38:12, skipping insertion in model container [2023-11-19 07:38:12,367 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:38:11" (2/3) ... [2023-11-19 07:38:12,367 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fc93c54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:38:12, skipping insertion in model container [2023-11-19 07:38:12,368 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:38:12" (3/3) ... [2023-11-19 07:38:12,369 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product59.cil.c [2023-11-19 07:38:12,391 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 07:38:12,391 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 07:38:12,459 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 07:38:12,466 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1b419d64, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-19 07:38:12,467 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 07:38:12,472 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 88 states have internal predecessors, (108), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-19 07:38:12,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-19 07:38:12,485 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:12,485 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:12,486 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:12,492 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:12,492 INFO L85 PathProgramCache]: Analyzing trace with hash -483847655, now seen corresponding path program 1 times [2023-11-19 07:38:12,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:12,504 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029687986] [2023-11-19 07:38:12,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:12,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:12,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:12,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-19 07:38:12,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:12,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-19 07:38:12,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:12,728 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:12,728 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:12,729 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029687986] [2023-11-19 07:38:12,730 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029687986] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:12,730 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:12,730 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 07:38:12,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [253099455] [2023-11-19 07:38:12,733 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:12,738 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 07:38:12,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:12,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 07:38:12,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:38:12,781 INFO L87 Difference]: Start difference. First operand has 103 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 88 states have internal predecessors, (108), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-19 07:38:12,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:12,834 INFO L93 Difference]: Finished difference Result 197 states and 266 transitions. [2023-11-19 07:38:12,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 07:38:12,837 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-19 07:38:12,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:12,849 INFO L225 Difference]: With dead ends: 197 [2023-11-19 07:38:12,849 INFO L226 Difference]: Without dead ends: 94 [2023-11-19 07:38:12,855 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:38:12,862 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:12,863 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:38:12,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-11-19 07:38:12,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2023-11-19 07:38:12,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 72 states have (on average 1.3055555555555556) internal successors, (94), 80 states have internal predecessors, (94), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-19 07:38:12,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 121 transitions. [2023-11-19 07:38:12,935 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 121 transitions. Word has length 32 [2023-11-19 07:38:12,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:12,937 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 121 transitions. [2023-11-19 07:38:12,937 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-19 07:38:12,937 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 121 transitions. [2023-11-19 07:38:12,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-19 07:38:12,941 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:12,941 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:12,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 07:38:12,942 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:12,942 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:12,943 INFO L85 PathProgramCache]: Analyzing trace with hash 697495445, now seen corresponding path program 1 times [2023-11-19 07:38:12,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:12,943 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012110267] [2023-11-19 07:38:12,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:12,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:12,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:38:13,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-19 07:38:13,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,254 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:13,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:13,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012110267] [2023-11-19 07:38:13,255 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012110267] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:13,255 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:13,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:38:13,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [135488502] [2023-11-19 07:38:13,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:13,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:38:13,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:13,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:38:13,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:38:13,259 INFO L87 Difference]: Start difference. First operand 94 states and 121 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:38:13,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:13,543 INFO L93 Difference]: Finished difference Result 321 states and 427 transitions. [2023-11-19 07:38:13,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-19 07:38:13,544 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2023-11-19 07:38:13,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:13,549 INFO L225 Difference]: With dead ends: 321 [2023-11-19 07:38:13,551 INFO L226 Difference]: Without dead ends: 235 [2023-11-19 07:38:13,553 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:38:13,557 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 312 mSDsluCounter, 388 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 520 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:13,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 520 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:38:13,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2023-11-19 07:38:13,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 229. [2023-11-19 07:38:13,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 172 states have (on average 1.3255813953488371) internal successors, (228), 190 states have internal predecessors, (228), 37 states have call successors, (37), 22 states have call predecessors, (37), 19 states have return successors, (37), 26 states have call predecessors, (37), 34 states have call successors, (37) [2023-11-19 07:38:13,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 302 transitions. [2023-11-19 07:38:13,645 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 302 transitions. Word has length 37 [2023-11-19 07:38:13,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:13,648 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 302 transitions. [2023-11-19 07:38:13,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:38:13,648 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 302 transitions. [2023-11-19 07:38:13,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-19 07:38:13,660 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:13,661 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:13,661 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 07:38:13,661 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:13,664 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:13,665 INFO L85 PathProgramCache]: Analyzing trace with hash -31413208, now seen corresponding path program 1 times [2023-11-19 07:38:13,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:13,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1450149937] [2023-11-19 07:38:13,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:13,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:13,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:38:13,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:38:13,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:38:13,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-19 07:38:13,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:13,831 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:13,831 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:13,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1450149937] [2023-11-19 07:38:13,832 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1450149937] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:13,832 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:13,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:38:13,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1436839437] [2023-11-19 07:38:13,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:13,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:38:13,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:13,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:38:13,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:38:13,836 INFO L87 Difference]: Start difference. First operand 229 states and 302 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 07:38:14,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:14,201 INFO L93 Difference]: Finished difference Result 676 states and 937 transitions. [2023-11-19 07:38:14,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:38:14,202 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2023-11-19 07:38:14,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:14,215 INFO L225 Difference]: With dead ends: 676 [2023-11-19 07:38:14,215 INFO L226 Difference]: Without dead ends: 455 [2023-11-19 07:38:14,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:38:14,221 INFO L413 NwaCegarLoop]: 156 mSDtfsCounter, 253 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:14,222 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 390 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:38:14,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 455 states. [2023-11-19 07:38:14,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 455 to 410. [2023-11-19 07:38:14,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 311 states have (on average 1.257234726688103) internal successors, (391), 325 states have internal predecessors, (391), 59 states have call successors, (59), 40 states have call predecessors, (59), 39 states have return successors, (88), 58 states have call predecessors, (88), 54 states have call successors, (88) [2023-11-19 07:38:14,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 538 transitions. [2023-11-19 07:38:14,354 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 538 transitions. Word has length 47 [2023-11-19 07:38:14,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:14,355 INFO L495 AbstractCegarLoop]: Abstraction has 410 states and 538 transitions. [2023-11-19 07:38:14,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-19 07:38:14,355 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 538 transitions. [2023-11-19 07:38:14,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-19 07:38:14,356 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:14,357 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:14,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 07:38:14,357 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:14,358 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:14,358 INFO L85 PathProgramCache]: Analyzing trace with hash 995675595, now seen corresponding path program 1 times [2023-11-19 07:38:14,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:14,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071593052] [2023-11-19 07:38:14,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:14,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:14,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-19 07:38:14,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-19 07:38:14,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,477 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-19 07:38:14,477 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:14,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071593052] [2023-11-19 07:38:14,478 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071593052] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:14,478 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:14,478 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 07:38:14,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1699127477] [2023-11-19 07:38:14,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:14,479 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 07:38:14,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:14,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 07:38:14,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 07:38:14,481 INFO L87 Difference]: Start difference. First operand 410 states and 538 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:38:14,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:14,629 INFO L93 Difference]: Finished difference Result 816 states and 1093 transitions. [2023-11-19 07:38:14,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:38:14,630 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2023-11-19 07:38:14,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:14,634 INFO L225 Difference]: With dead ends: 816 [2023-11-19 07:38:14,634 INFO L226 Difference]: Without dead ends: 414 [2023-11-19 07:38:14,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-19 07:38:14,639 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 88 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:14,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 516 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:38:14,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2023-11-19 07:38:14,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 405. [2023-11-19 07:38:14,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 306 states have (on average 1.2287581699346406) internal successors, (376), 320 states have internal predecessors, (376), 59 states have call successors, (59), 40 states have call predecessors, (59), 39 states have return successors, (88), 58 states have call predecessors, (88), 54 states have call successors, (88) [2023-11-19 07:38:14,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 523 transitions. [2023-11-19 07:38:14,690 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 523 transitions. Word has length 41 [2023-11-19 07:38:14,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:14,691 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 523 transitions. [2023-11-19 07:38:14,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-19 07:38:14,691 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 523 transitions. [2023-11-19 07:38:14,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-19 07:38:14,693 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:14,693 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:14,693 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 07:38:14,694 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:14,694 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:14,694 INFO L85 PathProgramCache]: Analyzing trace with hash -1874890241, now seen corresponding path program 1 times [2023-11-19 07:38:14,694 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:14,695 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [261326639] [2023-11-19 07:38:14,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:14,695 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:14,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-19 07:38:14,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-19 07:38:14,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-19 07:38:14,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:14,821 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:14,822 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:14,822 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [261326639] [2023-11-19 07:38:14,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [261326639] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:14,823 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:14,823 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 07:38:14,823 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740615096] [2023-11-19 07:38:14,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:14,824 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-19 07:38:14,824 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:14,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 07:38:14,825 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:38:14,825 INFO L87 Difference]: Start difference. First operand 405 states and 523 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 07:38:15,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:15,007 INFO L93 Difference]: Finished difference Result 753 states and 970 transitions. [2023-11-19 07:38:15,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 07:38:15,008 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 51 [2023-11-19 07:38:15,009 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:15,011 INFO L225 Difference]: With dead ends: 753 [2023-11-19 07:38:15,012 INFO L226 Difference]: Without dead ends: 356 [2023-11-19 07:38:15,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2023-11-19 07:38:15,021 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 86 mSDsluCounter, 369 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:15,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 460 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:38:15,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 356 states. [2023-11-19 07:38:15,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 356 to 344. [2023-11-19 07:38:15,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 264 states have (on average 1.246212121212121) internal successors, (329), 282 states have internal predecessors, (329), 40 states have call successors, (40), 33 states have call predecessors, (40), 39 states have return successors, (52), 42 states have call predecessors, (52), 40 states have call successors, (52) [2023-11-19 07:38:15,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 421 transitions. [2023-11-19 07:38:15,055 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 421 transitions. Word has length 51 [2023-11-19 07:38:15,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:15,055 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 421 transitions. [2023-11-19 07:38:15,056 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 07:38:15,056 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 421 transitions. [2023-11-19 07:38:15,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-19 07:38:15,057 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:15,058 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:15,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 07:38:15,058 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:15,058 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:15,059 INFO L85 PathProgramCache]: Analyzing trace with hash 588246295, now seen corresponding path program 1 times [2023-11-19 07:38:15,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:15,059 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061616696] [2023-11-19 07:38:15,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:15,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:15,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:38:15,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:38:15,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 07:38:15,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,172 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:15,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:15,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061616696] [2023-11-19 07:38:15,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061616696] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:15,173 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:15,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:38:15,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098672664] [2023-11-19 07:38:15,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:15,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:38:15,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:15,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:38:15,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:38:15,175 INFO L87 Difference]: Start difference. First operand 344 states and 421 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:38:15,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:15,334 INFO L93 Difference]: Finished difference Result 698 states and 869 transitions. [2023-11-19 07:38:15,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-19 07:38:15,334 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2023-11-19 07:38:15,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:15,337 INFO L225 Difference]: With dead ends: 698 [2023-11-19 07:38:15,338 INFO L226 Difference]: Without dead ends: 362 [2023-11-19 07:38:15,339 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:38:15,340 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 71 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:15,341 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 312 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:38:15,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2023-11-19 07:38:15,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 348. [2023-11-19 07:38:15,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 268 states have (on average 1.242537313432836) internal successors, (333), 286 states have internal predecessors, (333), 40 states have call successors, (40), 33 states have call predecessors, (40), 39 states have return successors, (52), 42 states have call predecessors, (52), 40 states have call successors, (52) [2023-11-19 07:38:15,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 425 transitions. [2023-11-19 07:38:15,371 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 425 transitions. Word has length 55 [2023-11-19 07:38:15,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:15,372 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 425 transitions. [2023-11-19 07:38:15,372 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:38:15,372 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 425 transitions. [2023-11-19 07:38:15,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-19 07:38:15,374 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:15,374 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:15,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 07:38:15,374 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:15,375 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:15,375 INFO L85 PathProgramCache]: Analyzing trace with hash 728794905, now seen corresponding path program 1 times [2023-11-19 07:38:15,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:15,375 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [727649137] [2023-11-19 07:38:15,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:15,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:15,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-19 07:38:15,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-19 07:38:15,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-19 07:38:15,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:15,504 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:15,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:15,507 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [727649137] [2023-11-19 07:38:15,507 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [727649137] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:15,507 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:15,507 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-19 07:38:15,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [65472350] [2023-11-19 07:38:15,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:15,508 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:38:15,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:15,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:38:15,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:38:15,510 INFO L87 Difference]: Start difference. First operand 348 states and 425 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:38:15,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:15,771 INFO L93 Difference]: Finished difference Result 1025 states and 1308 transitions. [2023-11-19 07:38:15,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:38:15,771 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 55 [2023-11-19 07:38:15,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:15,777 INFO L225 Difference]: With dead ends: 1025 [2023-11-19 07:38:15,778 INFO L226 Difference]: Without dead ends: 685 [2023-11-19 07:38:15,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:38:15,781 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 230 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 237 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:15,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [237 Valid, 326 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-19 07:38:15,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2023-11-19 07:38:15,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 683. [2023-11-19 07:38:15,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 683 states, 520 states have (on average 1.2230769230769232) internal successors, (636), 550 states have internal predecessors, (636), 87 states have call successors, (87), 74 states have call predecessors, (87), 75 states have return successors, (124), 86 states have call predecessors, (124), 87 states have call successors, (124) [2023-11-19 07:38:15,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 683 states and 847 transitions. [2023-11-19 07:38:15,847 INFO L78 Accepts]: Start accepts. Automaton has 683 states and 847 transitions. Word has length 55 [2023-11-19 07:38:15,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:15,848 INFO L495 AbstractCegarLoop]: Abstraction has 683 states and 847 transitions. [2023-11-19 07:38:15,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-19 07:38:15,848 INFO L276 IsEmpty]: Start isEmpty. Operand 683 states and 847 transitions. [2023-11-19 07:38:15,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-19 07:38:15,850 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:15,850 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:15,851 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 07:38:15,851 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:15,851 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:15,852 INFO L85 PathProgramCache]: Analyzing trace with hash 1287141247, now seen corresponding path program 1 times [2023-11-19 07:38:15,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:15,852 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002893963] [2023-11-19 07:38:15,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:15,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:15,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:16,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:38:16,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:16,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-19 07:38:16,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:16,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-19 07:38:16,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:16,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-19 07:38:16,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:16,137 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-19 07:38:16,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:16,137 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002893963] [2023-11-19 07:38:16,138 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002893963] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:38:16,138 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:38:16,138 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-19 07:38:16,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1983989924] [2023-11-19 07:38:16,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:38:16,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-19 07:38:16,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:16,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-19 07:38:16,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-19 07:38:16,141 INFO L87 Difference]: Start difference. First operand 683 states and 847 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:38:17,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:17,020 INFO L93 Difference]: Finished difference Result 1712 states and 2198 transitions. [2023-11-19 07:38:17,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-19 07:38:17,020 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2023-11-19 07:38:17,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:17,029 INFO L225 Difference]: With dead ends: 1712 [2023-11-19 07:38:17,029 INFO L226 Difference]: Without dead ends: 1174 [2023-11-19 07:38:17,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=209, Invalid=661, Unknown=0, NotChecked=0, Total=870 [2023-11-19 07:38:17,037 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 573 mSDsluCounter, 506 mSDsCounter, 0 mSdLazyCounter, 497 mSolverCounterSat, 158 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 581 SdHoareTripleChecker+Valid, 613 SdHoareTripleChecker+Invalid, 655 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 158 IncrementalHoareTripleChecker+Valid, 497 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:17,037 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [581 Valid, 613 Invalid, 655 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [158 Valid, 497 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-19 07:38:17,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1174 states. [2023-11-19 07:38:17,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1174 to 1012. [2023-11-19 07:38:17,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1012 states, 772 states have (on average 1.211139896373057) internal successors, (935), 819 states have internal predecessors, (935), 125 states have call successors, (125), 104 states have call predecessors, (125), 114 states have return successors, (171), 122 states have call predecessors, (171), 125 states have call successors, (171) [2023-11-19 07:38:17,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1012 states to 1012 states and 1231 transitions. [2023-11-19 07:38:17,155 INFO L78 Accepts]: Start accepts. Automaton has 1012 states and 1231 transitions. Word has length 59 [2023-11-19 07:38:17,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:17,156 INFO L495 AbstractCegarLoop]: Abstraction has 1012 states and 1231 transitions. [2023-11-19 07:38:17,156 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 07:38:17,157 INFO L276 IsEmpty]: Start isEmpty. Operand 1012 states and 1231 transitions. [2023-11-19 07:38:17,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2023-11-19 07:38:17,159 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:38:17,160 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:17,160 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-19 07:38:17,160 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:38:17,161 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:38:17,161 INFO L85 PathProgramCache]: Analyzing trace with hash -1032451292, now seen corresponding path program 1 times [2023-11-19 07:38:17,161 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:38:17,161 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123254267] [2023-11-19 07:38:17,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:17,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:38:17,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-19 07:38:17,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-19 07:38:17,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-19 07:38:17,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-19 07:38:17,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-19 07:38:17,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2023-11-19 07:38:17,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-19 07:38:17,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2023-11-19 07:38:17,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,589 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-19 07:38:17,590 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:38:17,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123254267] [2023-11-19 07:38:17,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123254267] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 07:38:17,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1993587804] [2023-11-19 07:38:17,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:38:17,591 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:38:17,591 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:38:17,594 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 07:38:17,632 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 07:38:17,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:38:17,733 INFO L262 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-19 07:38:17,742 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 07:38:17,969 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:38:17,983 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 07:38:18,235 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-19 07:38:18,235 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1993587804] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 07:38:18,236 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 07:38:18,236 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2023-11-19 07:38:18,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1306818959] [2023-11-19 07:38:18,236 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 07:38:18,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-19 07:38:18,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:38:18,239 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-19 07:38:18,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-19 07:38:18,239 INFO L87 Difference]: Start difference. First operand 1012 states and 1231 transitions. Second operand has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-19 07:38:19,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:38:19,678 INFO L93 Difference]: Finished difference Result 2185 states and 2738 transitions. [2023-11-19 07:38:19,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-19 07:38:19,679 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 100 [2023-11-19 07:38:19,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:38:19,681 INFO L225 Difference]: With dead ends: 2185 [2023-11-19 07:38:19,681 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 07:38:19,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 220 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 408 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2023-11-19 07:38:19,690 INFO L413 NwaCegarLoop]: 175 mSDtfsCounter, 456 mSDsluCounter, 1150 mSDsCounter, 0 mSdLazyCounter, 1066 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 1325 SdHoareTripleChecker+Invalid, 1212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 1066 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-19 07:38:19,691 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [457 Valid, 1325 Invalid, 1212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 1066 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-19 07:38:19,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 07:38:19,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 07:38:19,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:38:19,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 07:38:19,693 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 100 [2023-11-19 07:38:19,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:38:19,693 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 07:38:19,693 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.75) internal successors, (124), 11 states have internal predecessors, (124), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-19 07:38:19,694 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 07:38:19,694 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 07:38:19,696 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 07:38:19,726 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 07:38:19,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:38:19,915 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 07:38:23,654 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 352 359) no Hoare annotation was computed. [2023-11-19 07:38:23,656 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 352 359) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or (< 2 ~waterLevel~0) .cse0 (< ~switchedOnBeforeTS~0 1) .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2))) [2023-11-19 07:38:23,658 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 352 359) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 267 273) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 267 273) the Hoare annotation is: true [2023-11-19 07:38:23,659 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: true [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 895 924) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point L920(lines 895 924) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point L916(line 916) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 913) no Hoare annotation was computed. [2023-11-19 07:38:23,659 INFO L902 garLoopResultBuilder]: At program point L909-1(lines 909 913) the Hoare annotation is: true [2023-11-19 07:38:23,660 INFO L899 garLoopResultBuilder]: For program point L906(line 906) no Hoare annotation was computed. [2023-11-19 07:38:23,660 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 895 924) the Hoare annotation is: true [2023-11-19 07:38:23,660 INFO L902 garLoopResultBuilder]: At program point L905-2(lines 905 919) the Hoare annotation is: true [2023-11-19 07:38:23,660 INFO L902 garLoopResultBuilder]: At program point L901(line 901) the Hoare annotation is: true [2023-11-19 07:38:23,660 INFO L899 garLoopResultBuilder]: For program point L901-1(line 901) no Hoare annotation was computed. [2023-11-19 07:38:23,660 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2023-11-19 07:38:23,660 INFO L895 garLoopResultBuilder]: At program point L320(line 320) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1)) .cse2))) [2023-11-19 07:38:23,660 INFO L899 garLoopResultBuilder]: For program point L320-1(lines 301 325) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point L64-2(lines 60 71) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point L254-1(lines 254 260) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 448) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point L444-2(lines 444 448) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 151 159) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L895 garLoopResultBuilder]: At program point L874(line 874) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse6 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1) (let ((.cse3 (= ~waterLevel~0 1))) (or (and .cse2 .cse3 .cse4) .cse1 .cse5 .cse6 (and .cse7 .cse3 .cse4))) (let ((.cse8 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse7 .cse8 .cse4) .cse5 .cse6 .cse9 (and .cse2 .cse8 .cse4))) (or .cse0 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse9))) [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point L874-1(line 874) no Hoare annotation was computed. [2023-11-19 07:38:23,661 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 240 266) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 128 136) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L899 garLoopResultBuilder]: For program point L247-2(lines 243 265) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L899 garLoopResultBuilder]: For program point L309(lines 309 317) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 322) no Hoare annotation was computed. [2023-11-19 07:38:23,662 INFO L895 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse5) (or (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1))) [2023-11-19 07:38:23,670 INFO L899 garLoopResultBuilder]: For program point L859-1(line 859) no Hoare annotation was computed. [2023-11-19 07:38:23,670 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 886) no Hoare annotation was computed. [2023-11-19 07:38:23,671 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 836 843) no Hoare annotation was computed. [2023-11-19 07:38:23,671 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 240 266) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse5) (or (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1))) [2023-11-19 07:38:23,671 INFO L899 garLoopResultBuilder]: For program point L872(lines 872 889) no Hoare annotation was computed. [2023-11-19 07:38:23,672 INFO L899 garLoopResultBuilder]: For program point L872-1(lines 864 892) no Hoare annotation was computed. [2023-11-19 07:38:23,672 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 435 453) no Hoare annotation was computed. [2023-11-19 07:38:23,672 INFO L895 garLoopResultBuilder]: At program point L315(line 315) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-19 07:38:23,672 INFO L895 garLoopResultBuilder]: At program point L311(line 311) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-19 07:38:23,672 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 854 863) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 240 266) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 840) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point L840(line 840) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point L225(lines 164 229) no Hoare annotation was computed. [2023-11-19 07:38:23,673 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 180) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 956 966) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 1005 1011) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 970 992) no Hoare annotation was computed. [2023-11-19 07:38:23,674 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-19 07:38:23,675 INFO L895 garLoopResultBuilder]: At program point L222(lines 173 223) the Hoare annotation is: false [2023-11-19 07:38:23,675 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-19 07:38:23,675 INFO L899 garLoopResultBuilder]: For program point L210(lines 210 216) no Hoare annotation was computed. [2023-11-19 07:38:23,675 INFO L895 garLoopResultBuilder]: At program point L210-2(lines 204 217) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-19 07:38:23,676 INFO L899 garLoopResultBuilder]: For program point L458(lines 458 464) no Hoare annotation was computed. [2023-11-19 07:38:23,676 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 949 955) no Hoare annotation was computed. [2023-11-19 07:38:23,676 INFO L899 garLoopResultBuilder]: For program point L458-1(lines 458 464) no Hoare annotation was computed. [2023-11-19 07:38:23,676 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 200) no Hoare annotation was computed. [2023-11-19 07:38:23,677 INFO L899 garLoopResultBuilder]: For program point L194-1(lines 194 200) no Hoare annotation was computed. [2023-11-19 07:38:23,679 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 07:38:23,679 INFO L895 garLoopResultBuilder]: At program point L219(lines 174 221) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-19 07:38:23,679 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-19 07:38:23,679 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 846 853) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 1012 1018) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point L980(lines 980 987) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 454 468) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point L980-2(lines 980 987) no Hoare annotation was computed. [2023-11-19 07:38:23,680 INFO L899 garLoopResultBuilder]: For program point L175(lines 174 221) no Hoare annotation was computed. [2023-11-19 07:38:23,681 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 217) no Hoare annotation was computed. [2023-11-19 07:38:23,681 INFO L895 garLoopResultBuilder]: At program point L460(line 460) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2023-11-19 07:38:23,681 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 1019 1027) no Hoare annotation was computed. [2023-11-19 07:38:23,681 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-19 07:38:23,682 INFO L895 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) .cse1))) [2023-11-19 07:38:23,682 INFO L899 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2023-11-19 07:38:23,682 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2023-11-19 07:38:23,682 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2023-11-19 07:38:23,682 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 275 299) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1))) [2023-11-19 07:38:23,682 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1))) [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point L294-1(lines 275 299) no Hoare annotation was computed. [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 137 150) no Hoare annotation was computed. [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 416 434) no Hoare annotation was computed. [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 275 299) no Hoare annotation was computed. [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point L342(lines 342 348) no Hoare annotation was computed. [2023-11-19 07:38:23,683 INFO L899 garLoopResultBuilder]: For program point L342-2(lines 335 351) no Hoare annotation was computed. [2023-11-19 07:38:23,684 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCritical_returnLabel#1(lines 96 104) no Hoare annotation was computed. [2023-11-19 07:38:23,684 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarm_returnLabel#1(lines 360 370) no Hoare annotation was computed. [2023-11-19 07:38:23,684 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2023-11-19 07:38:23,685 INFO L899 garLoopResultBuilder]: For program point L425-2(lines 425 429) no Hoare annotation was computed. [2023-11-19 07:38:23,685 INFO L899 garLoopResultBuilder]: For program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 326 333) no Hoare annotation was computed. [2023-11-19 07:38:23,685 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-19 07:38:23,685 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2023-11-19 07:38:23,685 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse0 (< ~pumpRunning~0 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) .cse1 .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or .cse0 (= 2 ~waterLevel~0) (not (= |old(~waterLevel~0)| 2)) .cse2))) [2023-11-19 07:38:23,686 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 371 379) no Hoare annotation was computed. [2023-11-19 07:38:23,686 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 371 379) no Hoare annotation was computed. [2023-11-19 07:38:23,686 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 371 379) the Hoare annotation is: true [2023-11-19 07:38:23,690 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:38:23,693 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 07:38:23,712 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:38:23 BoogieIcfgContainer [2023-11-19 07:38:23,712 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 07:38:23,713 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 07:38:23,713 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 07:38:23,713 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 07:38:23,714 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:38:12" (3/4) ... [2023-11-19 07:38:23,716 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 07:38:23,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 07:38:23,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 07:38:23,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 07:38:23,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 07:38:23,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 07:38:23,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 07:38:23,723 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 07:38:23,723 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-19 07:38:23,739 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-19 07:38:23,740 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-19 07:38:23,741 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 07:38:23,742 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:38:23,742 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:38:23,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-19 07:38:23,843 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-19 07:38:23,900 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml [2023-11-19 07:38:23,900 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/witness.yml [2023-11-19 07:38:23,901 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 07:38:23,901 INFO L158 Benchmark]: Toolchain (without parser) took 12831.25ms. Allocated memory was 205.5MB in the beginning and 299.9MB in the end (delta: 94.4MB). Free memory was 158.6MB in the beginning and 164.8MB in the end (delta: -6.2MB). Peak memory consumption was 91.3MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,902 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 134.2MB. Free memory is still 79.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 07:38:23,902 INFO L158 Benchmark]: CACSL2BoogieTranslator took 610.54ms. Allocated memory is still 205.5MB. Free memory was 158.1MB in the beginning and 138.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,902 INFO L158 Benchmark]: Boogie Procedure Inliner took 61.97ms. Allocated memory is still 205.5MB. Free memory was 138.7MB in the beginning and 136.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,903 INFO L158 Benchmark]: Boogie Preprocessor took 56.84ms. Allocated memory is still 205.5MB. Free memory was 136.1MB in the beginning and 134.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,903 INFO L158 Benchmark]: RCFGBuilder took 548.95ms. Allocated memory is still 205.5MB. Free memory was 134.5MB in the beginning and 170.6MB in the end (delta: -36.1MB). Peak memory consumption was 20.5MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,903 INFO L158 Benchmark]: TraceAbstraction took 11351.16ms. Allocated memory was 205.5MB in the beginning and 299.9MB in the end (delta: 94.4MB). Free memory was 169.5MB in the beginning and 173.2MB in the end (delta: -3.7MB). Peak memory consumption was 171.4MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,904 INFO L158 Benchmark]: Witness Printer took 187.68ms. Allocated memory is still 299.9MB. Free memory was 173.2MB in the beginning and 164.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-19 07:38:23,906 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 134.2MB. Free memory is still 79.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 610.54ms. Allocated memory is still 205.5MB. Free memory was 158.1MB in the beginning and 138.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 61.97ms. Allocated memory is still 205.5MB. Free memory was 138.7MB in the beginning and 136.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.84ms. Allocated memory is still 205.5MB. Free memory was 136.1MB in the beginning and 134.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 548.95ms. Allocated memory is still 205.5MB. Free memory was 134.5MB in the beginning and 170.6MB in the end (delta: -36.1MB). Peak memory consumption was 20.5MB. Max. memory is 16.1GB. * TraceAbstraction took 11351.16ms. Allocated memory was 205.5MB in the beginning and 299.9MB in the end (delta: 94.4MB). Free memory was 169.5MB in the beginning and 173.2MB in the end (delta: -3.7MB). Peak memory consumption was 171.4MB. Max. memory is 16.1GB. * Witness Printer took 187.68ms. Allocated memory is still 299.9MB. Free memory was 173.2MB in the beginning and 164.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [160] - GenericResultAtLocation [Line: 230]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [230] - GenericResultAtLocation [Line: 469]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [469] - GenericResultAtLocation [Line: 835]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [835] - GenericResultAtLocation [Line: 844]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [844] - GenericResultAtLocation [Line: 893]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [893] - GenericResultAtLocation [Line: 993]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [993] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 840]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.3s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2104 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2069 mSDsluCounter, 4592 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3450 mSDsCounter, 528 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2256 IncrementalHoareTripleChecker+Invalid, 2784 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 528 mSolverCounterUnsat, 1142 mSDtfsCounter, 2256 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 394 GetRequests, 284 SyntacticMatches, 4 SemanticMatches, 106 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 619 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1012occurred in iteration=8, InterpolantAutomatonStates: 101, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 9 MinimizatonAttempts, 250 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 1403 PreInvPairs, 1640 NumberOfFragments, 821 HoareAnnotationTreeSize, 1403 FomulaSimplifications, 5292 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 24 FomulaSimplificationsInter, 10554 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 577 NumberOfCodeBlocks, 577 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 666 ConstructedInterpolants, 0 QuantifiedInterpolants, 1305 SizeOfPredicates, 3 NumberOfNonLiveVariables, 346 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 11 InterpolantComputations, 8 PerfectInterpolantSequences, 97/123 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-19 07:38:23,945 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ad1f0662-f11f-47a1-aaa2-adffd862f2ca/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE