./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 00:45:27,228 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 00:45:27,290 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 00:45:27,294 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 00:45:27,295 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 00:45:27,316 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 00:45:27,317 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 00:45:27,318 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 00:45:27,318 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 00:45:27,319 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 00:45:27,319 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 00:45:27,320 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 00:45:27,321 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 00:45:27,321 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 00:45:27,322 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 00:45:27,322 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 00:45:27,323 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 00:45:27,323 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 00:45:27,324 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 00:45:27,324 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 00:45:27,325 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 00:45:27,325 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 00:45:27,326 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 00:45:27,326 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 00:45:27,327 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 00:45:27,327 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 00:45:27,327 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 00:45:27,328 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 00:45:27,328 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 00:45:27,329 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 00:45:27,329 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 00:45:27,329 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:45:27,330 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 00:45:27,330 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 00:45:27,330 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 00:45:27,330 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 00:45:27,330 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 00:45:27,331 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 00:45:27,331 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 00:45:27,331 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 00:45:27,331 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 00:45:27,332 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 00:45:27,332 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a [2023-11-29 00:45:27,546 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 00:45:27,566 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 00:45:27,569 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 00:45:27,570 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 00:45:27,570 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 00:45:27,572 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2023-11-29 00:45:30,264 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 00:45:30,512 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 00:45:30,513 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2023-11-29 00:45:30,528 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/data/de9ece091/aa3c60a6e88b4013a190431f148c591d/FLAGdf519b0c2 [2023-11-29 00:45:30,542 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/data/de9ece091/aa3c60a6e88b4013a190431f148c591d [2023-11-29 00:45:30,544 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 00:45:30,545 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 00:45:30,547 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 00:45:30,547 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 00:45:30,551 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 00:45:30,552 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:30,553 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a127fc1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30, skipping insertion in model container [2023-11-29 00:45:30,553 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:30,604 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 00:45:30,792 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2023-11-29 00:45:30,871 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:45:30,883 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 00:45:30,893 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 00:45:30,895 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [168] [2023-11-29 00:45:30,895 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [272] [2023-11-29 00:45:30,896 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [317] [2023-11-29 00:45:30,896 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [326] [2023-11-29 00:45:30,896 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [692] [2023-11-29 00:45:30,896 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [771] [2023-11-29 00:45:30,897 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [1110] [2023-11-29 00:45:30,911 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2023-11-29 00:45:30,949 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:45:30,971 INFO L206 MainTranslator]: Completed translation [2023-11-29 00:45:30,971 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30 WrapperNode [2023-11-29 00:45:30,972 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 00:45:30,973 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 00:45:30,973 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 00:45:30,973 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 00:45:30,980 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:30,996 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,023 INFO L138 Inliner]: procedures = 65, calls = 124, calls flagged for inlining = 30, calls inlined = 27, statements flattened = 303 [2023-11-29 00:45:31,024 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 00:45:31,025 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 00:45:31,025 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 00:45:31,025 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 00:45:31,036 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,037 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,040 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,056 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 00:45:31,056 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,057 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,064 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,069 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,071 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,073 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,076 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 00:45:31,077 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 00:45:31,077 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 00:45:31,077 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 00:45:31,078 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (1/1) ... [2023-11-29 00:45:31,084 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:45:31,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:45:31,106 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 00:45:31,110 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 00:45:31,141 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 00:45:31,141 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2023-11-29 00:45:31,141 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2023-11-29 00:45:31,141 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 00:45:31,141 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 00:45:31,142 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 00:45:31,142 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 00:45:31,142 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2023-11-29 00:45:31,142 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2023-11-29 00:45:31,142 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 00:45:31,142 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 00:45:31,143 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2023-11-29 00:45:31,143 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2023-11-29 00:45:31,143 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-29 00:45:31,143 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-29 00:45:31,143 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2023-11-29 00:45:31,143 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2023-11-29 00:45:31,143 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 00:45:31,144 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 00:45:31,144 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 00:45:31,144 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 00:45:31,144 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 00:45:31,144 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2023-11-29 00:45:31,144 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2023-11-29 00:45:31,144 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 00:45:31,145 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 00:45:31,145 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 00:45:31,145 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 00:45:31,225 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 00:45:31,227 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 00:45:31,514 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 00:45:31,570 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 00:45:31,571 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 00:45:31,571 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:45:31 BoogieIcfgContainer [2023-11-29 00:45:31,571 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 00:45:31,574 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 00:45:31,574 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 00:45:31,577 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 00:45:31,577 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 12:45:30" (1/3) ... [2023-11-29 00:45:31,578 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@658ab3e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:45:31, skipping insertion in model container [2023-11-29 00:45:31,578 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:45:30" (2/3) ... [2023-11-29 00:45:31,578 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@658ab3e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:45:31, skipping insertion in model container [2023-11-29 00:45:31,578 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:45:31" (3/3) ... [2023-11-29 00:45:31,580 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_productSimulator.cil.c [2023-11-29 00:45:31,595 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 00:45:31,595 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 00:45:31,635 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 00:45:31,639 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@501e1af9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 00:45:31,640 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 00:45:31,643 INFO L276 IsEmpty]: Start isEmpty. Operand has 122 states, 78 states have (on average 1.4743589743589745) internal successors, (115), 94 states have internal predecessors, (115), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2023-11-29 00:45:31,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-29 00:45:31,655 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:31,656 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:31,656 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:31,661 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:31,662 INFO L85 PathProgramCache]: Analyzing trace with hash -549742903, now seen corresponding path program 1 times [2023-11-29 00:45:31,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:31,671 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7765626] [2023-11-29 00:45:31,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:31,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:31,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:31,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:31,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:31,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:31,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:31,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:31,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-29 00:45:31,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-29 00:45:31,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:31,924 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:31,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:31,925 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7765626] [2023-11-29 00:45:31,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7765626] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:31,926 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:31,926 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 00:45:31,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144448645] [2023-11-29 00:45:31,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:31,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 00:45:31,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:31,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 00:45:31,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:45:31,960 INFO L87 Difference]: Start difference. First operand has 122 states, 78 states have (on average 1.4743589743589745) internal successors, (115), 94 states have internal predecessors, (115), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 11.0) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 00:45:32,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:32,027 INFO L93 Difference]: Finished difference Result 228 states and 332 transitions. [2023-11-29 00:45:32,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 00:45:32,030 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 11.0) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 46 [2023-11-29 00:45:32,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:32,039 INFO L225 Difference]: With dead ends: 228 [2023-11-29 00:45:32,039 INFO L226 Difference]: Without dead ends: 117 [2023-11-29 00:45:32,043 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:45:32,047 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:32,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:45:32,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2023-11-29 00:45:32,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 117. [2023-11-29 00:45:32,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 75 states have (on average 1.4) internal successors, (105), 90 states have internal predecessors, (105), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2023-11-29 00:45:32,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 164 transitions. [2023-11-29 00:45:32,093 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 164 transitions. Word has length 46 [2023-11-29 00:45:32,095 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:32,095 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 164 transitions. [2023-11-29 00:45:32,095 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 11.0) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 00:45:32,095 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 164 transitions. [2023-11-29 00:45:32,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-29 00:45:32,099 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:32,099 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:32,100 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 00:45:32,100 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:32,100 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:32,100 INFO L85 PathProgramCache]: Analyzing trace with hash 684594689, now seen corresponding path program 1 times [2023-11-29 00:45:32,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:32,101 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1162656491] [2023-11-29 00:45:32,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:32,101 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:32,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:32,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:32,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:32,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:32,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:32,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:32,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-29 00:45:32,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-29 00:45:32,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,265 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:32,265 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:32,265 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1162656491] [2023-11-29 00:45:32,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1162656491] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:32,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:32,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 00:45:32,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [222063985] [2023-11-29 00:45:32,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:32,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:45:32,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:32,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:45:32,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:45:32,269 INFO L87 Difference]: Start difference. First operand 117 states and 164 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 00:45:32,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:32,321 INFO L93 Difference]: Finished difference Result 188 states and 263 transitions. [2023-11-29 00:45:32,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:45:32,321 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 47 [2023-11-29 00:45:32,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:32,324 INFO L225 Difference]: With dead ends: 188 [2023-11-29 00:45:32,324 INFO L226 Difference]: Without dead ends: 109 [2023-11-29 00:45:32,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:45:32,327 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 18 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:32,328 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 252 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:45:32,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2023-11-29 00:45:32,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2023-11-29 00:45:32,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 70 states have (on average 1.4142857142857144) internal successors, (99), 85 states have internal predecessors, (99), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2023-11-29 00:45:32,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 153 transitions. [2023-11-29 00:45:32,344 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 153 transitions. Word has length 47 [2023-11-29 00:45:32,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:32,344 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 153 transitions. [2023-11-29 00:45:32,345 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2023-11-29 00:45:32,345 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 153 transitions. [2023-11-29 00:45:32,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-29 00:45:32,347 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:32,347 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:32,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 00:45:32,348 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:32,348 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:32,348 INFO L85 PathProgramCache]: Analyzing trace with hash -930827711, now seen corresponding path program 1 times [2023-11-29 00:45:32,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:32,349 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150616089] [2023-11-29 00:45:32,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:32,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:32,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:32,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:32,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:32,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:32,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:32,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:32,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:45:32,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 00:45:32,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,461 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:32,461 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:32,462 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150616089] [2023-11-29 00:45:32,462 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150616089] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:32,462 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:32,462 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 00:45:32,462 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1249260846] [2023-11-29 00:45:32,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:32,463 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:45:32,463 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:32,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:45:32,464 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:45:32,464 INFO L87 Difference]: Start difference. First operand 109 states and 153 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 3 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-29 00:45:32,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:32,534 INFO L93 Difference]: Finished difference Result 295 states and 418 transitions. [2023-11-29 00:45:32,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:45:32,535 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 3 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 51 [2023-11-29 00:45:32,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:32,539 INFO L225 Difference]: With dead ends: 295 [2023-11-29 00:45:32,539 INFO L226 Difference]: Without dead ends: 202 [2023-11-29 00:45:32,540 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:45:32,541 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 144 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:32,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [144 Valid, 266 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:45:32,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2023-11-29 00:45:32,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 199. [2023-11-29 00:45:32,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 129 states have (on average 1.441860465116279) internal successors, (186), 158 states have internal predecessors, (186), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2023-11-29 00:45:32,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 282 transitions. [2023-11-29 00:45:32,574 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 282 transitions. Word has length 51 [2023-11-29 00:45:32,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:32,574 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 282 transitions. [2023-11-29 00:45:32,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 3 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-29 00:45:32,575 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 282 transitions. [2023-11-29 00:45:32,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-29 00:45:32,578 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:32,579 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:32,579 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 00:45:32,579 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:32,579 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:32,580 INFO L85 PathProgramCache]: Analyzing trace with hash 1605419551, now seen corresponding path program 1 times [2023-11-29 00:45:32,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:32,580 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [283674009] [2023-11-29 00:45:32,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:32,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:32,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:32,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:32,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:32,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:32,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:32,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:32,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-29 00:45:32,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-29 00:45:32,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:32,752 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2023-11-29 00:45:32,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:32,753 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [283674009] [2023-11-29 00:45:32,753 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [283674009] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:32,753 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:32,753 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 00:45:32,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629812959] [2023-11-29 00:45:32,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:32,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 00:45:32,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:32,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 00:45:32,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 00:45:32,756 INFO L87 Difference]: Start difference. First operand 199 states and 282 transitions. Second operand has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2023-11-29 00:45:33,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:33,017 INFO L93 Difference]: Finished difference Result 500 states and 734 transitions. [2023-11-29 00:45:33,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 00:45:33,019 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 54 [2023-11-29 00:45:33,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:33,024 INFO L225 Difference]: With dead ends: 500 [2023-11-29 00:45:33,025 INFO L226 Difference]: Without dead ends: 317 [2023-11-29 00:45:33,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-29 00:45:33,027 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 89 mSDsluCounter, 439 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 575 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:33,028 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 575 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 00:45:33,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2023-11-29 00:45:33,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 312. [2023-11-29 00:45:33,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 312 states, 210 states have (on average 1.3904761904761904) internal successors, (292), 243 states have internal predecessors, (292), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2023-11-29 00:45:33,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 312 states to 312 states and 440 transitions. [2023-11-29 00:45:33,070 INFO L78 Accepts]: Start accepts. Automaton has 312 states and 440 transitions. Word has length 54 [2023-11-29 00:45:33,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:33,071 INFO L495 AbstractCegarLoop]: Abstraction has 312 states and 440 transitions. [2023-11-29 00:45:33,071 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2023-11-29 00:45:33,071 INFO L276 IsEmpty]: Start isEmpty. Operand 312 states and 440 transitions. [2023-11-29 00:45:33,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-29 00:45:33,075 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:33,075 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:33,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 00:45:33,075 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:33,076 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:33,076 INFO L85 PathProgramCache]: Analyzing trace with hash -987399212, now seen corresponding path program 1 times [2023-11-29 00:45:33,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:33,076 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1245513890] [2023-11-29 00:45:33,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:33,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:33,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:33,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:33,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:33,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:33,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:33,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:33,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:45:33,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-29 00:45:33,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:33,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:33,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 00:45:33,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,261 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:33,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:33,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1245513890] [2023-11-29 00:45:33,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1245513890] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:33,262 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:33,262 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 00:45:33,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100145687] [2023-11-29 00:45:33,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:33,263 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 00:45:33,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:33,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 00:45:33,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 00:45:33,264 INFO L87 Difference]: Start difference. First operand 312 states and 440 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-29 00:45:33,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:33,708 INFO L93 Difference]: Finished difference Result 948 states and 1406 transitions. [2023-11-29 00:45:33,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-29 00:45:33,708 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) Word has length 73 [2023-11-29 00:45:33,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:33,714 INFO L225 Difference]: With dead ends: 948 [2023-11-29 00:45:33,714 INFO L226 Difference]: Without dead ends: 652 [2023-11-29 00:45:33,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-29 00:45:33,718 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 230 mSDsluCounter, 376 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 87 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 511 SdHoareTripleChecker+Invalid, 362 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:33,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 511 Invalid, 362 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 00:45:33,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2023-11-29 00:45:33,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 602. [2023-11-29 00:45:33,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 420 states have (on average 1.3428571428571427) internal successors, (564), 468 states have internal predecessors, (564), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2023-11-29 00:45:33,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 834 transitions. [2023-11-29 00:45:33,786 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 834 transitions. Word has length 73 [2023-11-29 00:45:33,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:33,786 INFO L495 AbstractCegarLoop]: Abstraction has 602 states and 834 transitions. [2023-11-29 00:45:33,786 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-29 00:45:33,786 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 834 transitions. [2023-11-29 00:45:33,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-29 00:45:33,789 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:33,789 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:33,790 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 00:45:33,790 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:33,790 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:33,790 INFO L85 PathProgramCache]: Analyzing trace with hash -1127947822, now seen corresponding path program 1 times [2023-11-29 00:45:33,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:33,791 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524525924] [2023-11-29 00:45:33,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:33,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:33,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:33,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:33,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:33,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:33,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:33,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:33,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:45:33,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-29 00:45:33,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:33,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:33,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 00:45:33,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:33,916 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:33,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:33,916 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524525924] [2023-11-29 00:45:33,916 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524525924] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:33,916 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:33,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 00:45:33,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [253782364] [2023-11-29 00:45:33,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:33,917 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 00:45:33,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:33,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 00:45:33,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 00:45:33,918 INFO L87 Difference]: Start difference. First operand 602 states and 834 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-29 00:45:34,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:34,176 INFO L93 Difference]: Finished difference Result 1202 states and 1732 transitions. [2023-11-29 00:45:34,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 00:45:34,177 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 73 [2023-11-29 00:45:34,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:34,182 INFO L225 Difference]: With dead ends: 1202 [2023-11-29 00:45:34,182 INFO L226 Difference]: Without dead ends: 616 [2023-11-29 00:45:34,185 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:45:34,186 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 73 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:34,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 365 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 00:45:34,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2023-11-29 00:45:34,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 610. [2023-11-29 00:45:34,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 610 states, 428 states have (on average 1.3364485981308412) internal successors, (572), 476 states have internal predecessors, (572), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2023-11-29 00:45:34,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 610 states to 610 states and 842 transitions. [2023-11-29 00:45:34,253 INFO L78 Accepts]: Start accepts. Automaton has 610 states and 842 transitions. Word has length 73 [2023-11-29 00:45:34,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:34,254 INFO L495 AbstractCegarLoop]: Abstraction has 610 states and 842 transitions. [2023-11-29 00:45:34,254 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-29 00:45:34,254 INFO L276 IsEmpty]: Start isEmpty. Operand 610 states and 842 transitions. [2023-11-29 00:45:34,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-29 00:45:34,256 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:34,257 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:34,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 00:45:34,257 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:34,257 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:34,257 INFO L85 PathProgramCache]: Analyzing trace with hash 1361581140, now seen corresponding path program 1 times [2023-11-29 00:45:34,257 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:34,258 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105503052] [2023-11-29 00:45:34,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:34,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:34,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:34,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:34,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:34,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:34,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:34,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:34,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-29 00:45:34,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-29 00:45:34,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:34,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:34,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 00:45:34,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,375 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:34,375 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:34,375 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105503052] [2023-11-29 00:45:34,375 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105503052] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:34,375 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:34,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 00:45:34,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510071144] [2023-11-29 00:45:34,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:34,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 00:45:34,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:34,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 00:45:34,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 00:45:34,377 INFO L87 Difference]: Start difference. First operand 610 states and 842 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-29 00:45:34,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:34,622 INFO L93 Difference]: Finished difference Result 1102 states and 1579 transitions. [2023-11-29 00:45:34,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 00:45:34,622 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 73 [2023-11-29 00:45:34,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:34,627 INFO L225 Difference]: With dead ends: 1102 [2023-11-29 00:45:34,627 INFO L226 Difference]: Without dead ends: 508 [2023-11-29 00:45:34,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:45:34,631 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 80 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:34,631 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 367 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 00:45:34,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2023-11-29 00:45:34,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 494. [2023-11-29 00:45:34,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 344 states have (on average 1.322674418604651) internal successors, (455), 385 states have internal predecessors, (455), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2023-11-29 00:45:34,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 671 transitions. [2023-11-29 00:45:34,675 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 671 transitions. Word has length 73 [2023-11-29 00:45:34,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:34,676 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 671 transitions. [2023-11-29 00:45:34,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-29 00:45:34,676 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 671 transitions. [2023-11-29 00:45:34,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2023-11-29 00:45:34,678 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:34,678 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:34,678 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 00:45:34,678 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:34,679 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:34,679 INFO L85 PathProgramCache]: Analyzing trace with hash -42339536, now seen corresponding path program 1 times [2023-11-29 00:45:34,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:34,679 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274192456] [2023-11-29 00:45:34,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:34,679 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:34,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:34,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:34,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:34,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:34,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:34,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:34,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 00:45:34,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-29 00:45:34,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-29 00:45:34,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:34,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:34,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2023-11-29 00:45:34,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:34,906 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2023-11-29 00:45:34,906 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:34,906 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274192456] [2023-11-29 00:45:34,906 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274192456] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:34,906 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:34,907 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-29 00:45:34,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978078537] [2023-11-29 00:45:34,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:34,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-29 00:45:34,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:34,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-29 00:45:34,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-29 00:45:34,909 INFO L87 Difference]: Start difference. First operand 494 states and 671 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2023-11-29 00:45:35,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:35,831 INFO L93 Difference]: Finished difference Result 1452 states and 2120 transitions. [2023-11-29 00:45:35,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-29 00:45:35,832 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 77 [2023-11-29 00:45:35,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:35,841 INFO L225 Difference]: With dead ends: 1452 [2023-11-29 00:45:35,841 INFO L226 Difference]: Without dead ends: 1092 [2023-11-29 00:45:35,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 192 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=200, Invalid=612, Unknown=0, NotChecked=0, Total=812 [2023-11-29 00:45:35,845 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 615 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 747 mSolverCounterSat, 311 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 623 SdHoareTripleChecker+Valid, 454 SdHoareTripleChecker+Invalid, 1058 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 311 IncrementalHoareTripleChecker+Valid, 747 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:35,845 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [623 Valid, 454 Invalid, 1058 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [311 Valid, 747 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-29 00:45:35,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1092 states. [2023-11-29 00:45:35,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1092 to 1022. [2023-11-29 00:45:35,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1022 states, 712 states have (on average 1.3174157303370786) internal successors, (938), 802 states have internal predecessors, (938), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2023-11-29 00:45:35,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1022 states to 1022 states and 1432 transitions. [2023-11-29 00:45:35,943 INFO L78 Accepts]: Start accepts. Automaton has 1022 states and 1432 transitions. Word has length 77 [2023-11-29 00:45:35,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:35,944 INFO L495 AbstractCegarLoop]: Abstraction has 1022 states and 1432 transitions. [2023-11-29 00:45:35,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2023-11-29 00:45:35,944 INFO L276 IsEmpty]: Start isEmpty. Operand 1022 states and 1432 transitions. [2023-11-29 00:45:35,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-29 00:45:35,947 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:35,947 INFO L195 NwaCegarLoop]: trace histogram [6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:35,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 00:45:35,947 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:35,948 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:35,948 INFO L85 PathProgramCache]: Analyzing trace with hash -486026201, now seen corresponding path program 1 times [2023-11-29 00:45:35,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:35,948 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837385645] [2023-11-29 00:45:35,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:35,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:35,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:35,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:35,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:35,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:35,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:35,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:35,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:36,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 00:45:36,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-29 00:45:36,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:36,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:36,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2023-11-29 00:45:36,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-29 00:45:36,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,051 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2023-11-29 00:45:36,051 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:36,051 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837385645] [2023-11-29 00:45:36,051 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837385645] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:36,051 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:45:36,052 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 00:45:36,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994415711] [2023-11-29 00:45:36,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:36,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 00:45:36,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:36,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 00:45:36,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:45:36,053 INFO L87 Difference]: Start difference. First operand 1022 states and 1432 transitions. Second operand has 7 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2023-11-29 00:45:36,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:36,539 INFO L93 Difference]: Finished difference Result 1685 states and 2345 transitions. [2023-11-29 00:45:36,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-29 00:45:36,540 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) Word has length 102 [2023-11-29 00:45:36,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:36,545 INFO L225 Difference]: With dead ends: 1685 [2023-11-29 00:45:36,546 INFO L226 Difference]: Without dead ends: 679 [2023-11-29 00:45:36,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-29 00:45:36,549 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 293 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 440 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 308 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 557 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 440 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:36,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [308 Valid, 342 Invalid, 557 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 440 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-29 00:45:36,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 679 states. [2023-11-29 00:45:36,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 679 to 651. [2023-11-29 00:45:36,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 651 states, 458 states have (on average 1.3100436681222707) internal successors, (600), 511 states have internal predecessors, (600), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2023-11-29 00:45:36,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 651 states to 651 states and 891 transitions. [2023-11-29 00:45:36,606 INFO L78 Accepts]: Start accepts. Automaton has 651 states and 891 transitions. Word has length 102 [2023-11-29 00:45:36,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:36,606 INFO L495 AbstractCegarLoop]: Abstraction has 651 states and 891 transitions. [2023-11-29 00:45:36,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2023-11-29 00:45:36,606 INFO L276 IsEmpty]: Start isEmpty. Operand 651 states and 891 transitions. [2023-11-29 00:45:36,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2023-11-29 00:45:36,608 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:36,608 INFO L195 NwaCegarLoop]: trace histogram [6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:36,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 00:45:36,608 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:36,609 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:36,609 INFO L85 PathProgramCache]: Analyzing trace with hash 385241915, now seen corresponding path program 1 times [2023-11-29 00:45:36,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:36,609 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326347315] [2023-11-29 00:45:36,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:36,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:36,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:36,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:36,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:36,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:36,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:36,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 00:45:36,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-29 00:45:36,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:36,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:36,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-29 00:45:36,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2023-11-29 00:45:36,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:36,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2023-11-29 00:45:36,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,720 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 18 proven. 5 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2023-11-29 00:45:36,720 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:36,720 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326347315] [2023-11-29 00:45:36,720 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326347315] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 00:45:36,720 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1643399918] [2023-11-29 00:45:36,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:36,720 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 00:45:36,720 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:45:36,722 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 00:45:36,726 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 00:45:36,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:36,835 INFO L262 TraceCheckSpWp]: Trace formula consists of 420 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-29 00:45:36,844 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 00:45:36,916 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-11-29 00:45:36,917 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 00:45:36,917 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1643399918] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:45:36,917 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 00:45:36,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2023-11-29 00:45:36,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024212569] [2023-11-29 00:45:36,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:45:36,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:45:36,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:36,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:45:36,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:45:36,919 INFO L87 Difference]: Start difference. First operand 651 states and 891 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2023-11-29 00:45:37,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:37,029 INFO L93 Difference]: Finished difference Result 1448 states and 2022 transitions. [2023-11-29 00:45:37,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:45:37,029 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 112 [2023-11-29 00:45:37,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:37,036 INFO L225 Difference]: With dead ends: 1448 [2023-11-29 00:45:37,036 INFO L226 Difference]: Without dead ends: 813 [2023-11-29 00:45:37,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 00:45:37,040 INFO L413 NwaCegarLoop]: 194 mSDtfsCounter, 86 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:37,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 271 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:45:37,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 813 states. [2023-11-29 00:45:37,114 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 813 to 813. [2023-11-29 00:45:37,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 813 states, 576 states have (on average 1.2986111111111112) internal successors, (748), 635 states have internal predecessors, (748), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2023-11-29 00:45:37,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 813 states to 813 states and 1098 transitions. [2023-11-29 00:45:37,119 INFO L78 Accepts]: Start accepts. Automaton has 813 states and 1098 transitions. Word has length 112 [2023-11-29 00:45:37,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:37,120 INFO L495 AbstractCegarLoop]: Abstraction has 813 states and 1098 transitions. [2023-11-29 00:45:37,120 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2023-11-29 00:45:37,120 INFO L276 IsEmpty]: Start isEmpty. Operand 813 states and 1098 transitions. [2023-11-29 00:45:37,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2023-11-29 00:45:37,122 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:45:37,122 INFO L195 NwaCegarLoop]: trace histogram [6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:37,130 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 00:45:37,323 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 00:45:37,324 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:45:37,324 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:45:37,324 INFO L85 PathProgramCache]: Analyzing trace with hash 717157337, now seen corresponding path program 1 times [2023-11-29 00:45:37,324 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:45:37,324 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039646458] [2023-11-29 00:45:37,324 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:37,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:45:37,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:37,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 00:45:37,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:45:37,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:45:37,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 00:45:37,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-29 00:45:37,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 00:45:37,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-29 00:45:37,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:37,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:37,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:37,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 00:45:37,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-29 00:45:37,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2023-11-29 00:45:37,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 00:45:37,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 00:45:37,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2023-11-29 00:45:37,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,566 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 15 proven. 11 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2023-11-29 00:45:37,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:45:37,566 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039646458] [2023-11-29 00:45:37,566 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039646458] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 00:45:37,567 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [420335726] [2023-11-29 00:45:37,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:45:37,567 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 00:45:37,567 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:45:37,568 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 00:45:37,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 00:45:37,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:45:37,686 INFO L262 TraceCheckSpWp]: Trace formula consists of 421 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-29 00:45:37,691 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 00:45:37,819 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 24 proven. 10 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-11-29 00:45:37,819 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 00:45:38,059 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2023-11-29 00:45:38,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [420335726] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 00:45:38,060 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 00:45:38,060 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-29 00:45:38,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990349333] [2023-11-29 00:45:38,060 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 00:45:38,061 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-29 00:45:38,061 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:45:38,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-29 00:45:38,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-29 00:45:38,062 INFO L87 Difference]: Start difference. First operand 813 states and 1098 transitions. Second operand has 15 states, 11 states have (on average 9.818181818181818) internal successors, (108), 10 states have internal predecessors, (108), 6 states have call successors, (31), 7 states have call predecessors, (31), 6 states have return successors, (26), 7 states have call predecessors, (26), 6 states have call successors, (26) [2023-11-29 00:45:39,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:45:39,699 INFO L93 Difference]: Finished difference Result 1569 states and 2172 transitions. [2023-11-29 00:45:39,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-29 00:45:39,700 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 9.818181818181818) internal successors, (108), 10 states have internal predecessors, (108), 6 states have call successors, (31), 7 states have call predecessors, (31), 6 states have return successors, (26), 7 states have call predecessors, (26), 6 states have call successors, (26) Word has length 114 [2023-11-29 00:45:39,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:45:39,701 INFO L225 Difference]: With dead ends: 1569 [2023-11-29 00:45:39,701 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 00:45:39,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 317 GetRequests, 268 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 582 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2023-11-29 00:45:39,708 INFO L413 NwaCegarLoop]: 154 mSDtfsCounter, 638 mSDsluCounter, 873 mSDsCounter, 0 mSdLazyCounter, 1617 mSolverCounterSat, 339 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 645 SdHoareTripleChecker+Valid, 1027 SdHoareTripleChecker+Invalid, 1956 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 339 IncrementalHoareTripleChecker+Valid, 1617 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-11-29 00:45:39,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [645 Valid, 1027 Invalid, 1956 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [339 Valid, 1617 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-11-29 00:45:39,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 00:45:39,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 00:45:39,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 00:45:39,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 00:45:39,710 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 114 [2023-11-29 00:45:39,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:45:39,710 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 00:45:39,711 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 9.818181818181818) internal successors, (108), 10 states have internal predecessors, (108), 6 states have call successors, (31), 7 states have call predecessors, (31), 6 states have return successors, (26), 7 states have call predecessors, (26), 6 states have call successors, (26) [2023-11-29 00:45:39,711 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 00:45:39,711 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 00:45:39,713 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 00:45:39,719 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 00:45:39,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-29 00:45:39,916 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 00:45:44,239 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 985 992) no Hoare annotation was computed. [2023-11-29 00:45:44,239 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 985 992) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2 .cse3))) [2023-11-29 00:45:44,240 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 943 950) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (= 2 ~waterLevel~0)) (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) [2023-11-29 00:45:44,240 INFO L899 garLoopResultBuilder]: For program point activatePump__before__methaneQueryEXIT(lines 943 950) no Hoare annotation was computed. [2023-11-29 00:45:44,240 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 1004 1012) no Hoare annotation was computed. [2023-11-29 00:45:44,240 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1004 1012) the Hoare annotation is: true [2023-11-29 00:45:44,240 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse5 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (< 2 ~waterLevel~0)) (.cse0 (not .cse7)) (.cse1 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 0) .cse2 .cse6 .cse7 (not .cse5)))) (and (or .cse0 .cse1 (not .cse2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse4 .cse1 (< ~switchedOnBeforeTS~0 1) .cse5 (< |old(~pumpRunning~0)| 1)) (or .cse4 .cse0 .cse1 .cse3 .cse5)))) [2023-11-29 00:45:44,240 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2023-11-29 00:45:44,240 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 145 158) no Hoare annotation was computed. [2023-11-29 00:45:44,240 INFO L895 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (< 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not .cse4))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse3 .cse1 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)) (or .cse3 .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)) .cse1 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse2))))) [2023-11-29 00:45:44,241 INFO L895 garLoopResultBuilder]: At program point L962(line 962) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse5 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (< 2 ~waterLevel~0)) (.cse0 (not .cse7)) (.cse1 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 0) .cse2 .cse6 .cse7 (not .cse5)))) (and (or .cse0 .cse1 (not .cse2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse4 .cse1 (< ~switchedOnBeforeTS~0 1) .cse5 (< |old(~pumpRunning~0)| 1)) (or .cse4 .cse0 .cse1 .cse3 .cse5)))) [2023-11-29 00:45:44,241 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,241 INFO L899 garLoopResultBuilder]: For program point L962-1(lines 951 967) no Hoare annotation was computed. [2023-11-29 00:45:44,241 INFO L899 garLoopResultBuilder]: For program point L834-1(lines 815 839) no Hoare annotation was computed. [2023-11-29 00:45:44,241 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2023-11-29 00:45:44,241 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorFINAL(lines 840 856) no Hoare annotation was computed. [2023-11-29 00:45:44,241 INFO L899 garLoopResultBuilder]: For program point L149(lines 149 155) no Hoare annotation was computed. [2023-11-29 00:45:44,242 INFO L895 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse5 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (< 2 ~waterLevel~0)) (.cse0 (not .cse7)) (.cse1 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 0) .cse2 .cse6 .cse7 (not .cse5)))) (and (or .cse0 .cse1 (not .cse2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse4 .cse1 (< ~switchedOnBeforeTS~0 1) .cse5 (< |old(~pumpRunning~0)| 1)) (or .cse4 .cse0 .cse1 .cse3 .cse5)))) [2023-11-29 00:45:44,242 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse1 .cse4 .cse2) (or .cse0 .cse2 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse4 .cse2 (not (= 2 ~waterLevel~0))))) [2023-11-29 00:45:44,242 INFO L899 garLoopResultBuilder]: For program point L979-1(lines 968 984) no Hoare annotation was computed. [2023-11-29 00:45:44,242 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 840 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or .cse3 .cse0 .cse1 .cse2 .cse4) (or .cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,242 INFO L899 garLoopResultBuilder]: For program point L1058(lines 1058 1062) no Hoare annotation was computed. [2023-11-29 00:45:44,242 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorEXIT(lines 840 856) no Hoare annotation was computed. [2023-11-29 00:45:44,242 INFO L899 garLoopResultBuilder]: For program point L1058-2(lines 1058 1062) no Hoare annotation was computed. [2023-11-29 00:45:44,242 INFO L899 garLoopResultBuilder]: For program point L823(lines 823 831) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 836) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 982) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 283) the Hoare annotation is: true [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point select_oneEXIT(lines 274 283) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point L96-1(lines 92 103) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 92 103) the Hoare annotation is: true [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 92 103) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point L1142(lines 1142 1152) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L899 garLoopResultBuilder]: For program point L787(lines 787 793) no Hoare annotation was computed. [2023-11-29 00:45:44,243 INFO L895 garLoopResultBuilder]: At program point L915(line 915) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 |old(~waterLevel~0)|)) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse1 .cse6 .cse2 (and .cse7 (<= ~waterLevel~0 2) .cse8)) (or .cse0 .cse5 .cse9) (or .cse0 .cse4 .cse5) (or .cse0 .cse9 .cse3) (or .cse0 .cse5 .cse1 .cse2) (or .cse5 .cse1 (and .cse7 (= ~waterLevel~0 1) .cse8) .cse9 .cse6))) [2023-11-29 00:45:44,244 INFO L899 garLoopResultBuilder]: For program point L1138(lines 1138 1155) no Hoare annotation was computed. [2023-11-29 00:45:44,244 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 783 805) no Hoare annotation was computed. [2023-11-29 00:45:44,244 INFO L899 garLoopResultBuilder]: For program point L1138-1(lines 1130 1158) no Hoare annotation was computed. [2023-11-29 00:45:44,244 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 |old(~waterLevel~0)|)) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse1 .cse6 .cse2 (and .cse7 (<= ~waterLevel~0 2) .cse8)) (or .cse0 .cse5 .cse9) (or .cse0 .cse4 .cse5) (or .cse0 .cse9 .cse3) (or .cse0 .cse5 .cse1 .cse2) (or .cse5 .cse1 (and .cse7 (= ~waterLevel~0 1) .cse8) .cse9 .cse6))) [2023-11-29 00:45:44,244 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 |old(~waterLevel~0)|)) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse1 .cse6 .cse2 (and .cse7 (<= ~waterLevel~0 2) .cse8)) (or .cse0 .cse5 .cse9) (or .cse0 .cse4 .cse5) (or .cse0 .cse9 .cse3) (or .cse0 .cse5 .cse1 .cse2) (or .cse5 .cse1 (and .cse7 (= ~waterLevel~0 1) .cse8) .cse9 .cse6))) [2023-11-29 00:45:44,244 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2023-11-29 00:45:44,244 INFO L895 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse4 .cse5 (and .cse6 (= ~waterLevel~0 1))) (or .cse0 .cse5 (and .cse6 (= 2 ~waterLevel~0)) .cse7) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse1 .cse8 .cse2) (or .cse0 .cse7 .cse3) (or .cse5 .cse1 .cse7 .cse8) (or .cse0 (and .cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse5 .cse1 .cse2))) [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L920-1(lines 901 925) no Hoare annotation was computed. [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L1143(lines 1143 1149) no Hoare annotation was computed. [2023-11-29 00:45:44,245 INFO L895 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse5 .cse1 .cse6 .cse2 (and .cse7 (<= ~waterLevel~0 2) .cse8)) (or .cse0 .cse4 .cse5 (and .cse9 .cse10)) (or .cse0 .cse5 (and .cse9 (= 2 ~waterLevel~0)) .cse11) (or .cse0 .cse11 .cse3) (or .cse5 .cse1 (and .cse7 .cse10 .cse8) .cse11 .cse6) (or .cse0 (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse5 .cse1 .cse2))) [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 926 942) no Hoare annotation was computed. [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L322(line 322) no Hoare annotation was computed. [2023-11-29 00:45:44,245 INFO L895 garLoopResultBuilder]: At program point L1140(line 1140) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse7 .cse3)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (= 0 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse13 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4)) (or .cse8 .cse0 .cse5) (or .cse8 .cse9 .cse0 .cse10) (or .cse8 .cse9 .cse10 .cse11) (let ((.cse12 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse7 .cse12 .cse4) .cse6 .cse13 (and .cse2 .cse12 .cse4))) (or .cse8 .cse5 .cse11) (or .cse8 .cse14 .cse1 .cse13 .cse11) (or .cse8 .cse14 .cse0 .cse1 .cse13)))) [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L1140-1(line 1140) no Hoare annotation was computed. [2023-11-29 00:45:44,245 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 917) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 780 806) the Hoare annotation is: (let ((.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse11 (= 2 ~waterLevel~0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse15 .cse11 .cse12)) (.cse4 (and .cse15 .cse12 (= ~waterLevel~0 1))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (and .cse15 .cse12 .cse14)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse13 (< |old(~pumpRunning~0)| 1)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6) (or .cse7 .cse0 .cse8 .cse9 .cse3) (or .cse0 .cse6 .cse1 .cse2) (or .cse4 .cse0 .cse5 .cse3) (or .cse7 .cse0 .cse6 .cse8 .cse9) (or .cse6 .cse8 (and .cse10 .cse11 .cse12) .cse2 .cse13) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse6 .cse8 .cse13 (and .cse10 .cse12 .cse14) .cse9)))) [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 922) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 940) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point L794-1(lines 794 800) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 780 806) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 322) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point L72(lines 72 76) no Hoare annotation was computed. [2023-11-29 00:45:44,246 INFO L899 garLoopResultBuilder]: For program point L72-2(lines 68 79) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L895 garLoopResultBuilder]: At program point L1125(line 1125) the Hoare annotation is: (let ((.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse11 (= 2 ~waterLevel~0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse15 .cse11 .cse12)) (.cse4 (and .cse15 .cse12 (= ~waterLevel~0 1))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (and .cse15 .cse12 .cse14)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse13 (< |old(~pumpRunning~0)| 1)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6) (or .cse7 .cse0 .cse8 .cse9 .cse3) (or .cse0 .cse6 .cse1 .cse2) (or .cse4 .cse0 .cse5 .cse3) (or .cse7 .cse0 .cse6 .cse8 .cse9) (or .cse6 .cse8 (and .cse10 .cse11 .cse12) .cse2 .cse13) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse6 .cse8 .cse13 (and .cse10 .cse12 .cse14) .cse9)))) [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point L1125-1(line 1125) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 171 200) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 189) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L902 garLoopResultBuilder]: At program point L185-1(lines 185 189) the Hoare annotation is: true [2023-11-29 00:45:44,247 INFO L902 garLoopResultBuilder]: At program point L181-2(lines 181 195) the Hoare annotation is: true [2023-11-29 00:45:44,247 INFO L902 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: true [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 171 200) the Hoare annotation is: true [2023-11-29 00:45:44,247 INFO L899 garLoopResultBuilder]: For program point L196(lines 171 200) no Hoare annotation was computed. [2023-11-29 00:45:44,247 INFO L902 garLoopResultBuilder]: At program point processEnvironment__before__highWaterSensorFINAL(lines 807 813) the Hoare annotation is: true [2023-11-29 00:45:44,248 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__highWaterSensorEXIT(lines 807 813) no Hoare annotation was computed. [2023-11-29 00:45:44,248 INFO L895 garLoopResultBuilder]: At program point L1093(line 1093) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2023-11-29 00:45:44,248 INFO L895 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,248 INFO L899 garLoopResultBuilder]: For program point L292-1(line 292) no Hoare annotation was computed. [2023-11-29 00:45:44,248 INFO L899 garLoopResultBuilder]: For program point L259(lines 259 266) no Hoare annotation was computed. [2023-11-29 00:45:44,248 INFO L899 garLoopResultBuilder]: For program point L259-2(lines 259 266) no Hoare annotation was computed. [2023-11-29 00:45:44,248 INFO L895 garLoopResultBuilder]: At program point L763(lines 704 764) the Hoare annotation is: false [2023-11-29 00:45:44,248 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 757) no Hoare annotation was computed. [2023-11-29 00:45:44,248 INFO L895 garLoopResultBuilder]: At program point L747-1(lines 735 758) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse2 .cse6 .cse7 .cse3) (and .cse0 .cse5 .cse2 .cse4) (and .cse8 .cse5 .cse2 .cse6 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse5 .cse2 .cse7) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-29 00:45:44,248 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L293-1(line 293) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L706(lines 705 762) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L294-1(line 294) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L895 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L295-1(line 295) no Hoare annotation was computed. [2023-11-29 00:45:44,249 INFO L899 garLoopResultBuilder]: For program point L766(lines 695 770) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L899 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L895 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse2 .cse6 .cse7 .cse3) (and .cse0 .cse5 .cse2 .cse4) (and .cse8 .cse5 .cse2 .cse6 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse5 .cse2 .cse7) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-29 00:45:44,250 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L899 garLoopResultBuilder]: For program point L735(lines 735 758) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L895 garLoopResultBuilder]: At program point L760(lines 705 762) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse2 .cse6 .cse7 .cse3) (and .cse0 .cse5 .cse2 .cse4) (and .cse8 .cse5 .cse2 .cse6 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse5 .cse2 .cse7) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-29 00:45:44,250 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse2 .cse6 .cse7 .cse3) (and .cse0 .cse5 .cse2 .cse4) (and .cse8 .cse5 .cse2 .cse6 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse5 .cse2 .cse7) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-29 00:45:44,250 INFO L899 garLoopResultBuilder]: For program point L1091(lines 1091 1097) no Hoare annotation was computed. [2023-11-29 00:45:44,250 INFO L895 garLoopResultBuilder]: At program point L290(line 290) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point L1091-1(lines 1091 1097) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point L290-1(line 290) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point L291-1(line 291) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 80 91) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 80 91) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse8 (not (= 0 ~systemActive~0))) (.cse5 (< ~pumpRunning~0 1)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse1 .cse7) (or .cse0 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse1 .cse10) (or .cse0 .cse2 .cse3 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse8) (or .cse5 .cse6 .cse1 .cse2 .cse7))) [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 80 91) no Hoare annotation was computed. [2023-11-29 00:45:44,251 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or .cse3 .cse0 .cse1 .cse2 .cse4) (or .cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,251 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmEXIT(lines 883 899) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 883 899) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or .cse3 .cse0 .cse1 .cse2 .cse4) (or .cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,252 INFO L895 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,252 INFO L895 garLoopResultBuilder]: At program point L868(line 868) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) .cse3 (< |old(~pumpRunning~0)| 1)))) [2023-11-29 00:45:44,252 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmFINAL(lines 883 899) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L899 garLoopResultBuilder]: For program point L862(lines 862 879) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L899 garLoopResultBuilder]: For program point L1077(lines 1077 1081) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L899 garLoopResultBuilder]: For program point L1077-2(lines 1077 1081) no Hoare annotation was computed. [2023-11-29 00:45:44,252 INFO L895 garLoopResultBuilder]: At program point L877(line 877) the Hoare annotation is: (let ((.cse3 (< 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse3 .cse2 (< ~switchedOnBeforeTS~0 1) .cse4 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or .cse3 .cse0 .cse1 .cse2 .cse4))) [2023-11-29 00:45:44,253 INFO L899 garLoopResultBuilder]: For program point L877-1(lines 858 882) no Hoare annotation was computed. [2023-11-29 00:45:44,253 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 993 1003) no Hoare annotation was computed. [2023-11-29 00:45:44,253 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 993 1003) the Hoare annotation is: true [2023-11-29 00:45:44,255 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:45:44,256 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 00:45:44,268 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 12:45:44 BoogieIcfgContainer [2023-11-29 00:45:44,268 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 00:45:44,269 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 00:45:44,269 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 00:45:44,269 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 00:45:44,270 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:45:31" (3/4) ... [2023-11-29 00:45:44,271 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure activatePump__before__methaneQuery [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__lowWaterSensor [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure select_one [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 00:45:44,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__highWaterSensor [2023-11-29 00:45:44,276 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 00:45:44,276 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__methaneAlarm [2023-11-29 00:45:44,276 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 00:45:44,285 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2023-11-29 00:45:44,286 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2023-11-29 00:45:44,287 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 00:45:44,288 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:45:44,289 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:45:44,411 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 00:45:44,412 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 00:45:44,412 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 00:45:44,413 INFO L158 Benchmark]: Toolchain (without parser) took 13867.14ms. Allocated memory was 155.2MB in the beginning and 270.5MB in the end (delta: 115.3MB). Free memory was 120.0MB in the beginning and 112.1MB in the end (delta: 7.9MB). Peak memory consumption was 125.7MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,413 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 55.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 00:45:44,413 INFO L158 Benchmark]: CACSL2BoogieTranslator took 425.28ms. Allocated memory is still 155.2MB. Free memory was 119.6MB in the beginning and 99.1MB in the end (delta: 20.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,414 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.29ms. Allocated memory is still 155.2MB. Free memory was 99.1MB in the beginning and 96.3MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,414 INFO L158 Benchmark]: Boogie Preprocessor took 51.39ms. Allocated memory is still 155.2MB. Free memory was 96.3MB in the beginning and 93.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,414 INFO L158 Benchmark]: RCFGBuilder took 494.61ms. Allocated memory is still 155.2MB. Free memory was 93.3MB in the beginning and 113.0MB in the end (delta: -19.7MB). Peak memory consumption was 20.3MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,415 INFO L158 Benchmark]: TraceAbstraction took 12694.66ms. Allocated memory was 155.2MB in the beginning and 270.5MB in the end (delta: 115.3MB). Free memory was 112.3MB in the beginning and 121.6MB in the end (delta: -9.3MB). Peak memory consumption was 150.7MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,415 INFO L158 Benchmark]: Witness Printer took 143.07ms. Allocated memory is still 270.5MB. Free memory was 121.6MB in the beginning and 112.1MB in the end (delta: 9.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-29 00:45:44,417 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 55.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 425.28ms. Allocated memory is still 155.2MB. Free memory was 119.6MB in the beginning and 99.1MB in the end (delta: 20.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.29ms. Allocated memory is still 155.2MB. Free memory was 99.1MB in the beginning and 96.3MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 51.39ms. Allocated memory is still 155.2MB. Free memory was 96.3MB in the beginning and 93.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 494.61ms. Allocated memory is still 155.2MB. Free memory was 93.3MB in the beginning and 113.0MB in the end (delta: -19.7MB). Peak memory consumption was 20.3MB. Max. memory is 16.1GB. * TraceAbstraction took 12694.66ms. Allocated memory was 155.2MB in the beginning and 270.5MB in the end (delta: 115.3MB). Free memory was 112.3MB in the beginning and 121.6MB in the end (delta: -9.3MB). Peak memory consumption was 150.7MB. Max. memory is 16.1GB. * Witness Printer took 143.07ms. Allocated memory is still 270.5MB. Free memory was 121.6MB in the beginning and 112.1MB in the end (delta: 9.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 168]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [168] - GenericResultAtLocation [Line: 272]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [272] - GenericResultAtLocation [Line: 317]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [317] - GenericResultAtLocation [Line: 326]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [326] - GenericResultAtLocation [Line: 692]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [692] - GenericResultAtLocation [Line: 771]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [771] - GenericResultAtLocation [Line: 1110]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [1110] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 322]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 122 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.6s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2323 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2266 mSDsluCounter, 4580 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3076 mSDsCounter, 937 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3757 IncrementalHoareTripleChecker+Invalid, 4694 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 937 mSolverCounterUnsat, 1504 mSDtfsCounter, 3757 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 745 GetRequests, 624 SyntacticMatches, 4 SemanticMatches, 117 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 813 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1022occurred in iteration=8, InterpolantAutomatonStates: 114, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 176 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2920 PreInvPairs, 3123 NumberOfFragments, 2960 HoareAnnotationTreeSize, 2920 FomulaSimplifications, 3922 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 44 FomulaSimplificationsInter, 8558 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1048 NumberOfCodeBlocks, 1048 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1148 ConstructedInterpolants, 0 QuantifiedInterpolants, 2054 SizeOfPredicates, 3 NumberOfNonLiveVariables, 841 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 14 InterpolantComputations, 10 PerfectInterpolantSequences, 588/623 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 993]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive)) && (waterLevel == 1))) || (((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == __SELECTED_FEATURE_highWaterSensor)))) || (((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == __SELECTED_FEATURE_highWaterSensor))) && (0 == systemActive))) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || ((((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == __SELECTED_FEATURE_highWaterSensor))) && (1 <= switchedOnBeforeTS))) || (((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) && !((0 == __SELECTED_FEATURE_highWaterSensor)))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 00:45:44,430 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ca52975-1854-412c-92ed-2c6e62e7d6ec/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE