./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 06:50:05,519 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 06:50:05,581 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 06:50:05,586 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 06:50:05,587 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 06:50:05,612 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 06:50:05,613 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 06:50:05,613 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 06:50:05,614 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 06:50:05,614 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 06:50:05,615 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 06:50:05,615 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 06:50:05,616 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 06:50:05,617 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 06:50:05,617 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 06:50:05,618 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 06:50:05,618 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 06:50:05,619 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 06:50:05,619 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 06:50:05,620 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 06:50:05,620 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 06:50:05,621 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 06:50:05,621 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 06:50:05,622 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 06:50:05,622 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 06:50:05,623 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 06:50:05,623 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 06:50:05,624 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 06:50:05,624 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 06:50:05,624 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 06:50:05,625 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 06:50:05,625 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:50:05,625 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 06:50:05,626 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 06:50:05,626 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 06:50:05,626 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 06:50:05,626 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 06:50:05,626 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 06:50:05,627 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 06:50:05,627 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 06:50:05,627 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 06:50:05,627 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 06:50:05,627 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a [2023-11-29 06:50:05,825 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 06:50:05,846 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 06:50:05,849 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 06:50:05,850 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 06:50:05,851 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 06:50:05,852 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2023-11-29 06:50:08,683 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 06:50:08,885 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 06:50:08,886 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2023-11-29 06:50:08,897 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/data/296c1e84d/ebfd12059c6a4f508b30db77322b19ca/FLAGfaa8cd84c [2023-11-29 06:50:08,911 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/data/296c1e84d/ebfd12059c6a4f508b30db77322b19ca [2023-11-29 06:50:08,914 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 06:50:08,915 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 06:50:08,916 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 06:50:08,916 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 06:50:08,921 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 06:50:08,921 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:50:08" (1/1) ... [2023-11-29 06:50:08,922 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e7bd52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:08, skipping insertion in model container [2023-11-29 06:50:08,923 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:50:08" (1/1) ... [2023-11-29 06:50:08,972 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 06:50:09,226 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2023-11-29 06:50:09,230 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:50:09,241 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 06:50:09,249 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-29 06:50:09,251 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [309] [2023-11-29 06:50:09,251 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [379] [2023-11-29 06:50:09,251 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [417] [2023-11-29 06:50:09,251 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [783] [2023-11-29 06:50:09,252 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [879] [2023-11-29 06:50:09,252 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [983] [2023-11-29 06:50:09,252 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1010] [2023-11-29 06:50:09,312 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2023-11-29 06:50:09,313 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:50:09,331 INFO L206 MainTranslator]: Completed translation [2023-11-29 06:50:09,332 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09 WrapperNode [2023-11-29 06:50:09,332 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 06:50:09,333 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 06:50:09,333 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 06:50:09,333 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 06:50:09,339 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,352 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,379 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 218 [2023-11-29 06:50:09,379 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 06:50:09,380 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 06:50:09,380 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 06:50:09,380 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 06:50:09,390 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,390 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,394 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,409 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 06:50:09,409 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,410 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,416 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,420 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,422 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,424 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,426 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 06:50:09,427 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 06:50:09,428 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 06:50:09,428 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 06:50:09,429 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (1/1) ... [2023-11-29 06:50:09,435 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:50:09,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:50:09,456 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 06:50:09,461 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 06:50:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 06:50:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 06:50:09,493 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 06:50:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 06:50:09,493 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 06:50:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 06:50:09,493 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 06:50:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 06:50:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 06:50:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:50:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:50:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 06:50:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 06:50:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 06:50:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 06:50:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 06:50:09,495 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 06:50:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 06:50:09,495 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 06:50:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 06:50:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 06:50:09,495 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 06:50:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 06:50:09,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 06:50:09,579 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 06:50:09,581 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 06:50:09,837 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 06:50:09,897 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 06:50:09,897 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 06:50:09,898 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:50:09 BoogieIcfgContainer [2023-11-29 06:50:09,898 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 06:50:09,901 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 06:50:09,901 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 06:50:09,904 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 06:50:09,904 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 06:50:08" (1/3) ... [2023-11-29 06:50:09,905 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30d8716d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:50:09, skipping insertion in model container [2023-11-29 06:50:09,905 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:50:09" (2/3) ... [2023-11-29 06:50:09,905 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30d8716d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:50:09, skipping insertion in model container [2023-11-29 06:50:09,905 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:50:09" (3/3) ... [2023-11-29 06:50:09,907 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product62.cil.c [2023-11-29 06:50:09,926 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 06:50:09,927 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 06:50:09,974 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 06:50:09,979 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@737ae2df, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 06:50:09,979 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 06:50:09,983 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 58 states have (on average 1.5) internal successors, (87), 68 states have internal predecessors, (87), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-29 06:50:09,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 06:50:09,991 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:09,991 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:09,992 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:09,995 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:09,996 INFO L85 PathProgramCache]: Analyzing trace with hash 613329276, now seen corresponding path program 1 times [2023-11-29 06:50:10,003 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:10,003 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1969275756] [2023-11-29 06:50:10,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:10,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:10,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:50:10,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:50:10,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:10,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1969275756] [2023-11-29 06:50:10,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1969275756] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:10,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:10,174 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 06:50:10,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1192409441] [2023-11-29 06:50:10,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:10,181 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 06:50:10,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:10,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 06:50:10,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:50:10,216 INFO L87 Difference]: Start difference. First operand has 88 states, 58 states have (on average 1.5) internal successors, (87), 68 states have internal predecessors, (87), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:10,284 INFO L93 Difference]: Finished difference Result 174 states and 247 transitions. [2023-11-29 06:50:10,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 06:50:10,286 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-29 06:50:10,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:10,297 INFO L225 Difference]: With dead ends: 174 [2023-11-29 06:50:10,297 INFO L226 Difference]: Without dead ends: 83 [2023-11-29 06:50:10,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:50:10,305 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:10,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 102 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:50:10,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2023-11-29 06:50:10,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2023-11-29 06:50:10,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 55 states have (on average 1.4) internal successors, (77), 64 states have internal predecessors, (77), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-29 06:50:10,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 112 transitions. [2023-11-29 06:50:10,356 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 112 transitions. Word has length 16 [2023-11-29 06:50:10,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:10,356 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 112 transitions. [2023-11-29 06:50:10,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,357 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 112 transitions. [2023-11-29 06:50:10,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 06:50:10,359 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:10,359 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:10,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 06:50:10,360 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:10,361 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:10,361 INFO L85 PathProgramCache]: Analyzing trace with hash -1659498664, now seen corresponding path program 1 times [2023-11-29 06:50:10,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:10,361 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791873279] [2023-11-29 06:50:10,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:10,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:10,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 06:50:10,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:50:10,459 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:10,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791873279] [2023-11-29 06:50:10,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791873279] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:10,459 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:10,459 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:50:10,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536517366] [2023-11-29 06:50:10,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:10,461 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 06:50:10,461 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:10,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 06:50:10,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:50:10,463 INFO L87 Difference]: Start difference. First operand 83 states and 112 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:10,509 INFO L93 Difference]: Finished difference Result 139 states and 187 transitions. [2023-11-29 06:50:10,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 06:50:10,509 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 06:50:10,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:10,512 INFO L225 Difference]: With dead ends: 139 [2023-11-29 06:50:10,512 INFO L226 Difference]: Without dead ends: 75 [2023-11-29 06:50:10,513 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:50:10,515 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 11 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:10,515 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 163 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:50:10,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-29 06:50:10,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-29 06:50:10,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.42) internal successors, (71), 59 states have internal predecessors, (71), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 06:50:10,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 101 transitions. [2023-11-29 06:50:10,531 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 101 transitions. Word has length 17 [2023-11-29 06:50:10,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:10,531 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 101 transitions. [2023-11-29 06:50:10,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,532 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 101 transitions. [2023-11-29 06:50:10,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-29 06:50:10,534 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:10,534 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:10,535 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 06:50:10,535 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:10,536 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:10,536 INFO L85 PathProgramCache]: Analyzing trace with hash -159313563, now seen corresponding path program 1 times [2023-11-29 06:50:10,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:10,536 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [99808792] [2023-11-29 06:50:10,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:10,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:10,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:50:10,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:50:10,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:10,652 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [99808792] [2023-11-29 06:50:10,652 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [99808792] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:10,653 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:10,653 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 06:50:10,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48749214] [2023-11-29 06:50:10,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:10,654 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:50:10,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:10,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:50:10,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 06:50:10,655 INFO L87 Difference]: Start difference. First operand 75 states and 101 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:10,729 INFO L93 Difference]: Finished difference Result 148 states and 201 transitions. [2023-11-29 06:50:10,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 06:50:10,730 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-29 06:50:10,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:10,732 INFO L225 Difference]: With dead ends: 148 [2023-11-29 06:50:10,732 INFO L226 Difference]: Without dead ends: 75 [2023-11-29 06:50:10,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:50:10,735 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 107 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:10,735 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 156 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:50:10,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-29 06:50:10,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-29 06:50:10,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.4) internal successors, (70), 59 states have internal predecessors, (70), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 06:50:10,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 100 transitions. [2023-11-29 06:50:10,750 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 100 transitions. Word has length 20 [2023-11-29 06:50:10,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:10,750 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 100 transitions. [2023-11-29 06:50:10,750 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 06:50:10,750 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 100 transitions. [2023-11-29 06:50:10,752 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 06:50:10,752 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:10,752 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:10,752 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 06:50:10,753 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:10,753 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:10,753 INFO L85 PathProgramCache]: Analyzing trace with hash -1768235212, now seen corresponding path program 1 times [2023-11-29 06:50:10,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:10,754 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400077648] [2023-11-29 06:50:10,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:10,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:10,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:50:10,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:50:10,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-29 06:50:10,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:10,912 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:50:10,912 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:10,912 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400077648] [2023-11-29 06:50:10,913 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400077648] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:10,913 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:10,913 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 06:50:10,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [492987666] [2023-11-29 06:50:10,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:10,914 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 06:50:10,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:10,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 06:50:10,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:50:10,915 INFO L87 Difference]: Start difference. First operand 75 states and 100 transitions. Second operand has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:50:11,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:11,245 INFO L93 Difference]: Finished difference Result 227 states and 301 transitions. [2023-11-29 06:50:11,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 06:50:11,246 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2023-11-29 06:50:11,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:11,249 INFO L225 Difference]: With dead ends: 227 [2023-11-29 06:50:11,249 INFO L226 Difference]: Without dead ends: 154 [2023-11-29 06:50:11,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2023-11-29 06:50:11,251 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 146 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:11,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 271 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 06:50:11,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2023-11-29 06:50:11,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 148. [2023-11-29 06:50:11,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 101 states have (on average 1.316831683168317) internal successors, (133), 110 states have internal predecessors, (133), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-29 06:50:11,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 190 transitions. [2023-11-29 06:50:11,279 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 190 transitions. Word has length 33 [2023-11-29 06:50:11,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:11,279 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 190 transitions. [2023-11-29 06:50:11,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 06:50:11,280 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 190 transitions. [2023-11-29 06:50:11,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-11-29 06:50:11,281 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:11,282 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:11,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 06:50:11,282 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:11,283 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:11,283 INFO L85 PathProgramCache]: Analyzing trace with hash -1592820235, now seen corresponding path program 1 times [2023-11-29 06:50:11,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:11,283 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139586189] [2023-11-29 06:50:11,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:11,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:11,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:50:11,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:50:11,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:50:11,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-29 06:50:11,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,421 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:50:11,421 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:11,422 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139586189] [2023-11-29 06:50:11,422 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139586189] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:11,422 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:11,422 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 06:50:11,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106263858] [2023-11-29 06:50:11,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:11,423 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 06:50:11,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:11,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 06:50:11,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:50:11,425 INFO L87 Difference]: Start difference. First operand 148 states and 190 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:50:11,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:11,670 INFO L93 Difference]: Finished difference Result 156 states and 196 transitions. [2023-11-29 06:50:11,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 06:50:11,671 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 40 [2023-11-29 06:50:11,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:11,673 INFO L225 Difference]: With dead ends: 156 [2023-11-29 06:50:11,673 INFO L226 Difference]: Without dead ends: 154 [2023-11-29 06:50:11,674 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-29 06:50:11,675 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 120 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:11,675 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 200 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 06:50:11,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2023-11-29 06:50:11,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 148. [2023-11-29 06:50:11,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 101 states have (on average 1.297029702970297) internal successors, (131), 110 states have internal predecessors, (131), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-29 06:50:11,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 188 transitions. [2023-11-29 06:50:11,697 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 188 transitions. Word has length 40 [2023-11-29 06:50:11,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:11,698 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 188 transitions. [2023-11-29 06:50:11,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:50:11,698 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 188 transitions. [2023-11-29 06:50:11,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-29 06:50:11,711 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:11,711 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:11,711 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 06:50:11,712 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:11,712 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:11,712 INFO L85 PathProgramCache]: Analyzing trace with hash -315195111, now seen corresponding path program 1 times [2023-11-29 06:50:11,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:11,712 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860550353] [2023-11-29 06:50:11,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:11,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:11,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:50:11,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:50:11,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:50:11,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 06:50:11,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-29 06:50:11,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:11,963 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 06:50:11,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:11,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860550353] [2023-11-29 06:50:11,964 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860550353] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:11,964 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:50:11,965 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2023-11-29 06:50:11,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408393745] [2023-11-29 06:50:11,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:11,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2023-11-29 06:50:11,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:11,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2023-11-29 06:50:11,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2023-11-29 06:50:11,967 INFO L87 Difference]: Start difference. First operand 148 states and 188 transitions. Second operand has 11 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-29 06:50:12,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:12,584 INFO L93 Difference]: Finished difference Result 422 states and 554 transitions. [2023-11-29 06:50:12,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-29 06:50:12,585 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 47 [2023-11-29 06:50:12,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:12,588 INFO L225 Difference]: With dead ends: 422 [2023-11-29 06:50:12,588 INFO L226 Difference]: Without dead ends: 276 [2023-11-29 06:50:12,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2023-11-29 06:50:12,591 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 277 mSDsluCounter, 427 mSDsCounter, 0 mSdLazyCounter, 498 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 501 SdHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 498 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:12,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 501 Invalid, 624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 498 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-29 06:50:12,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2023-11-29 06:50:12,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 273. [2023-11-29 06:50:12,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 185 states have (on average 1.2702702702702702) internal successors, (235), 201 states have internal predecessors, (235), 43 states have call successors, (43), 34 states have call predecessors, (43), 44 states have return successors, (71), 48 states have call predecessors, (71), 43 states have call successors, (71) [2023-11-29 06:50:12,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 349 transitions. [2023-11-29 06:50:12,638 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 349 transitions. Word has length 47 [2023-11-29 06:50:12,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:12,638 INFO L495 AbstractCegarLoop]: Abstraction has 273 states and 349 transitions. [2023-11-29 06:50:12,639 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 3.888888888888889) internal successors, (35), 7 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-29 06:50:12,639 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 349 transitions. [2023-11-29 06:50:12,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2023-11-29 06:50:12,645 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:50:12,645 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:12,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 06:50:12,646 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:50:12,646 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:50:12,646 INFO L85 PathProgramCache]: Analyzing trace with hash 185798567, now seen corresponding path program 1 times [2023-11-29 06:50:12,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:50:12,647 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983884755] [2023-11-29 06:50:12,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:12,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:50:12,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:50:12,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:50:12,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:50:12,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 06:50:12,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 06:50:12,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 06:50:12,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-29 06:50:12,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-29 06:50:12,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 06:50:12,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-29 06:50:12,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:50:12,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:50:12,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2023-11-29 06:50:12,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:12,978 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-29 06:50:12,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:50:12,979 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983884755] [2023-11-29 06:50:12,979 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1983884755] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:50:12,979 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [719326263] [2023-11-29 06:50:12,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:50:12,979 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:50:12,980 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:50:12,988 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:50:12,990 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 06:50:13,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:50:13,102 INFO L262 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 06:50:13,110 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:50:13,279 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 06:50:13,279 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 06:50:13,280 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [719326263] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:50:13,280 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 06:50:13,280 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [13] total 18 [2023-11-29 06:50:13,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529295696] [2023-11-29 06:50:13,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:50:13,281 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 06:50:13,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:50:13,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 06:50:13,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=261, Unknown=0, NotChecked=0, Total=306 [2023-11-29 06:50:13,303 INFO L87 Difference]: Start difference. First operand 273 states and 349 transitions. Second operand has 8 states, 6 states have (on average 11.0) internal successors, (66), 6 states have internal predecessors, (66), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2023-11-29 06:50:13,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:50:13,523 INFO L93 Difference]: Finished difference Result 602 states and 770 transitions. [2023-11-29 06:50:13,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 06:50:13,524 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 11.0) internal successors, (66), 6 states have internal predecessors, (66), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 98 [2023-11-29 06:50:13,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:50:13,525 INFO L225 Difference]: With dead ends: 602 [2023-11-29 06:50:13,525 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 06:50:13,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=323, Unknown=0, NotChecked=0, Total=380 [2023-11-29 06:50:13,529 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 59 mSDsluCounter, 498 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 642 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:50:13,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 642 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:50:13,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 06:50:13,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 06:50:13,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:50:13,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 06:50:13,532 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2023-11-29 06:50:13,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:50:13,532 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 06:50:13,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 11.0) internal successors, (66), 6 states have internal predecessors, (66), 3 states have call successors, (14), 3 states have call predecessors, (14), 5 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2023-11-29 06:50:13,532 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 06:50:13,532 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 06:50:13,535 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 06:50:13,550 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 06:50:13,737 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-11-29 06:50:13,739 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 06:50:14,762 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2023-11-29 06:50:14,762 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-29 06:50:14,763 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2023-11-29 06:50:14,763 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2023-11-29 06:50:14,763 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2023-11-29 06:50:14,763 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 123 147) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-29 06:50:14,763 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)) .cse2))) [2023-11-29 06:50:14,764 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-29 06:50:14,764 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2023-11-29 06:50:14,764 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2023-11-29 06:50:14,764 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (and .cse1 .cse0)))) [2023-11-29 06:50:14,764 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2023-11-29 06:50:14,765 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2023-11-29 06:50:14,765 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2023-11-29 06:50:14,765 INFO L899 garLoopResultBuilder]: For program point L911-1(lines 907 918) no Hoare annotation was computed. [2023-11-29 06:50:14,765 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 907 918) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) (< |old(~methaneLevelCritical~0)| 1) .cse0) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-29 06:50:14,765 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 907 918) no Hoare annotation was computed. [2023-11-29 06:50:14,765 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 785 814) no Hoare annotation was computed. [2023-11-29 06:50:14,766 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2023-11-29 06:50:14,766 INFO L902 garLoopResultBuilder]: At program point L799-1(lines 799 803) the Hoare annotation is: true [2023-11-29 06:50:14,766 INFO L902 garLoopResultBuilder]: At program point L795-2(lines 795 809) the Hoare annotation is: true [2023-11-29 06:50:14,766 INFO L902 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: true [2023-11-29 06:50:14,766 INFO L899 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2023-11-29 06:50:14,766 INFO L899 garLoopResultBuilder]: For program point L810(lines 785 814) no Hoare annotation was computed. [2023-11-29 06:50:14,767 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 785 814) the Hoare annotation is: true [2023-11-29 06:50:14,767 INFO L899 garLoopResultBuilder]: For program point L806(line 806) no Hoare annotation was computed. [2023-11-29 06:50:14,767 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 919 927) the Hoare annotation is: true [2023-11-29 06:50:14,767 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 919 927) no Hoare annotation was computed. [2023-11-29 06:50:14,767 INFO L899 garLoopResultBuilder]: For program point L993(lines 993 1006) no Hoare annotation was computed. [2023-11-29 06:50:14,767 INFO L899 garLoopResultBuilder]: For program point L993-1(lines 985 1009) no Hoare annotation was computed. [2023-11-29 06:50:14,768 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (and .cse3 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse2 .cse4) (or .cse0 .cse2 .cse4) (or .cse3 .cse1 .cse2))) [2023-11-29 06:50:14,768 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 .cse2 .cse3))) [2023-11-29 06:50:14,768 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2023-11-29 06:50:14,768 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or .cse0 (< ~methaneLevelCritical~0 1) .cse1))) [2023-11-29 06:50:14,769 INFO L899 garLoopResultBuilder]: For program point L168-1(lines 149 173) no Hoare annotation was computed. [2023-11-29 06:50:14,769 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2023-11-29 06:50:14,769 INFO L899 garLoopResultBuilder]: For program point L887(lines 887 891) no Hoare annotation was computed. [2023-11-29 06:50:14,769 INFO L899 garLoopResultBuilder]: For program point L1015(line 1015) no Hoare annotation was computed. [2023-11-29 06:50:14,769 INFO L899 garLoopResultBuilder]: For program point L887-2(lines 883 894) no Hoare annotation was computed. [2023-11-29 06:50:14,769 INFO L895 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (or (= ~pumpRunning~0 0) (= 0 ~systemActive~0) (< ~methaneLevelCritical~0 1)) [2023-11-29 06:50:14,770 INFO L899 garLoopResultBuilder]: For program point L991-1(line 991) no Hoare annotation was computed. [2023-11-29 06:50:14,770 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2023-11-29 06:50:14,770 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2023-11-29 06:50:14,770 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 88) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-29 06:50:14,770 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-29 06:50:14,770 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1015) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse1 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point L353(lines 353 366) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point L374(lines 313 378) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 339) no Hoare annotation was computed. [2023-11-29 06:50:14,771 INFO L899 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 873) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L899 garLoopResultBuilder]: For program point L866-2(lines 866 873) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L895 garLoopResultBuilder]: At program point L371(lines 322 372) the Hoare annotation is: false [2023-11-29 06:50:14,772 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 349) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2023-11-29 06:50:14,772 INFO L895 garLoopResultBuilder]: At program point L368(lines 323 370) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-11-29 06:50:14,772 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-11-29 06:50:14,773 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 06:50:14,773 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 365) no Hoare annotation was computed. [2023-11-29 06:50:14,773 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 353 366) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2))) [2023-11-29 06:50:14,773 INFO L899 garLoopResultBuilder]: For program point L324(lines 323 370) no Hoare annotation was computed. [2023-11-29 06:50:14,773 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2023-11-29 06:50:14,773 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2023-11-29 06:50:14,774 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 97 121) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-11-29 06:50:14,774 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 960 973) no Hoare annotation was computed. [2023-11-29 06:50:14,774 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2023-11-29 06:50:14,774 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2023-11-29 06:50:14,774 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (and .cse1 .cse0)))) [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L189-2(lines 182 198) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (and .cse1 .cse0)))) [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2023-11-29 06:50:14,775 INFO L899 garLoopResultBuilder]: For program point L964(lines 964 970) no Hoare annotation was computed. [2023-11-29 06:50:14,776 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 895 906) no Hoare annotation was computed. [2023-11-29 06:50:14,776 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 895 906) the Hoare annotation is: true [2023-11-29 06:50:14,776 INFO L899 garLoopResultBuilder]: For program point L899-1(lines 895 906) no Hoare annotation was computed. [2023-11-29 06:50:14,776 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2023-11-29 06:50:14,776 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 207 217) the Hoare annotation is: true [2023-11-29 06:50:14,776 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2023-11-29 06:50:14,776 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2023-11-29 06:50:14,779 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:50:14,781 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 06:50:14,794 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 06:50:14 BoogieIcfgContainer [2023-11-29 06:50:14,795 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 06:50:14,795 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 06:50:14,795 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 06:50:14,796 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 06:50:14,796 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:50:09" (3/4) ... [2023-11-29 06:50:14,798 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 06:50:14,812 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:50:14,813 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 06:50:14,813 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-29 06:50:14,813 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 06:50:14,822 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 34 nodes and edges [2023-11-29 06:50:14,823 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 06:50:14,824 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 06:50:14,825 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:50:14,825 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:50:14,954 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 06:50:14,954 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 06:50:14,955 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 06:50:14,955 INFO L158 Benchmark]: Toolchain (without parser) took 6040.48ms. Allocated memory was 146.8MB in the beginning and 176.2MB in the end (delta: 29.4MB). Free memory was 112.0MB in the beginning and 139.7MB in the end (delta: -27.7MB). Peak memory consumption was 95.2MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,956 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 102.8MB. Free memory is still 50.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 06:50:14,956 INFO L158 Benchmark]: CACSL2BoogieTranslator took 416.37ms. Allocated memory is still 146.8MB. Free memory was 111.6MB in the beginning and 91.9MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,957 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.60ms. Allocated memory is still 146.8MB. Free memory was 91.9MB in the beginning and 89.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,957 INFO L158 Benchmark]: Boogie Preprocessor took 46.45ms. Allocated memory is still 146.8MB. Free memory was 89.8MB in the beginning and 87.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,957 INFO L158 Benchmark]: RCFGBuilder took 470.57ms. Allocated memory is still 146.8MB. Free memory was 87.3MB in the beginning and 107.1MB in the end (delta: -19.8MB). Peak memory consumption was 15.8MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,958 INFO L158 Benchmark]: TraceAbstraction took 4894.13ms. Allocated memory was 146.8MB in the beginning and 176.2MB in the end (delta: 29.4MB). Free memory was 106.2MB in the beginning and 54.3MB in the end (delta: 51.9MB). Peak memory consumption was 81.0MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,958 INFO L158 Benchmark]: Witness Printer took 159.54ms. Allocated memory is still 176.2MB. Free memory was 54.3MB in the beginning and 139.7MB in the end (delta: -85.5MB). Peak memory consumption was 6.8MB. Max. memory is 16.1GB. [2023-11-29 06:50:14,961 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 102.8MB. Free memory is still 50.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 416.37ms. Allocated memory is still 146.8MB. Free memory was 111.6MB in the beginning and 91.9MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.60ms. Allocated memory is still 146.8MB. Free memory was 91.9MB in the beginning and 89.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.45ms. Allocated memory is still 146.8MB. Free memory was 89.8MB in the beginning and 87.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 470.57ms. Allocated memory is still 146.8MB. Free memory was 87.3MB in the beginning and 107.1MB in the end (delta: -19.8MB). Peak memory consumption was 15.8MB. Max. memory is 16.1GB. * TraceAbstraction took 4894.13ms. Allocated memory was 146.8MB in the beginning and 176.2MB in the end (delta: 29.4MB). Free memory was 106.2MB in the beginning and 54.3MB in the end (delta: 51.9MB). Peak memory consumption was 81.0MB. Max. memory is 16.1GB. * Witness Printer took 159.54ms. Allocated memory is still 176.2MB. Free memory was 54.3MB in the beginning and 139.7MB in the end (delta: -85.5MB). Peak memory consumption was 6.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 309]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [309] - GenericResultAtLocation [Line: 379]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [379] - GenericResultAtLocation [Line: 417]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [417] - GenericResultAtLocation [Line: 783]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [783] - GenericResultAtLocation [Line: 879]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [879] - GenericResultAtLocation [Line: 983]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [983] - GenericResultAtLocation [Line: 1010]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1010] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1015]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.8s, OverallIterations: 7, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 747 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 720 mSDsluCounter, 2035 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1412 mSDsCounter, 228 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1134 IncrementalHoareTripleChecker+Invalid, 1362 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 228 mSolverCounterUnsat, 623 mSDtfsCounter, 1134 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 223 GetRequests, 163 SyntacticMatches, 0 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 135 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=273occurred in iteration=6, InterpolantAutomatonStates: 54, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 7 MinimizatonAttempts, 15 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 415 PreInvPairs, 463 NumberOfFragments, 621 HoareAnnotationTreeSize, 415 FomulaSimplifications, 801 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 30 FomulaSimplificationsInter, 1480 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 369 NumberOfCodeBlocks, 369 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 361 ConstructedInterpolants, 0 QuantifiedInterpolants, 637 SizeOfPredicates, 3 NumberOfNonLiveVariables, 341 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 8 InterpolantComputations, 7 PerfectInterpolantSequences, 80/82 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((methaneLevelCritical == 0) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-29 06:50:14,980 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1465c50d-52fb-449b-a2d5-e9b3c1a0b957/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE