./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca9ad45e9cd0fa7cfc478092837003ff1c91f26680d4fb1c37c440560090c9e6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:42:20,902 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:42:20,905 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:42:20,937 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:42:20,937 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:42:20,939 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:42:20,940 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:42:20,943 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:42:20,945 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:42:20,946 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:42:20,947 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:42:20,949 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:42:20,949 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:42:20,950 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:42:20,952 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:42:20,954 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:42:20,955 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:42:20,956 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:42:20,958 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:42:20,961 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:42:20,963 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:42:20,968 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:42:20,970 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:42:20,971 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:42:20,976 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:42:20,976 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:42:20,979 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:42:20,980 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:42:20,981 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:42:20,982 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:42:20,982 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:42:20,983 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:42:20,984 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:42:20,985 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:42:20,986 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:42:20,987 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:42:20,988 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:42:20,988 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:42:20,989 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:42:20,990 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:42:20,991 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:42:20,992 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:42:21,034 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:42:21,035 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:42:21,035 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:42:21,035 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:42:21,036 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:42:21,036 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:42:21,037 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:42:21,038 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:42:21,038 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:42:21,038 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:42:21,038 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:42:21,039 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:42:21,039 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:42:21,039 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:42:21,039 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:42:21,040 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:42:21,040 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:42:21,040 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:42:21,040 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:42:21,040 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:42:21,041 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:42:21,041 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:42:21,041 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:42:21,041 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:42:21,042 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:42:21,042 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:42:21,042 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:42:21,042 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:42:21,043 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:42:21,043 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:42:21,043 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:42:21,043 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:42:21,043 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:42:21,044 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca9ad45e9cd0fa7cfc478092837003ff1c91f26680d4fb1c37c440560090c9e6 [2022-10-17 10:42:21,343 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:42:21,374 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:42:21,377 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:42:21,378 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:42:21,379 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:42:21,380 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c [2022-10-17 10:42:21,456 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/data/efcd124c8/a9294a87940a481489aa22e02bc5bea6/FLAG339306f68 [2022-10-17 10:42:21,954 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:42:21,955 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c [2022-10-17 10:42:21,967 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/data/efcd124c8/a9294a87940a481489aa22e02bc5bea6/FLAG339306f68 [2022-10-17 10:42:22,293 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/data/efcd124c8/a9294a87940a481489aa22e02bc5bea6 [2022-10-17 10:42:22,296 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:42:22,300 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:42:22,302 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:42:22,302 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:42:22,305 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:42:22,306 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,307 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@869cfbe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22, skipping insertion in model container [2022-10-17 10:42:22,307 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,328 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:42:22,392 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:42:22,588 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c[1605,1618] [2022-10-17 10:42:22,734 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:42:22,751 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:42:22,764 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c[1605,1618] [2022-10-17 10:42:22,812 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:42:22,830 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:42:22,830 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22 WrapperNode [2022-10-17 10:42:22,830 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:42:22,831 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:42:22,832 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:42:22,832 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:42:22,839 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,854 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,899 INFO L138 Inliner]: procedures = 55, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 250 [2022-10-17 10:42:22,900 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:42:22,901 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:42:22,901 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:42:22,901 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:42:22,910 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,910 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,921 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,921 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,927 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,944 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,945 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,947 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,949 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:42:22,950 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:42:22,950 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:42:22,950 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:42:22,960 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (1/1) ... [2022-10-17 10:42:22,966 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:42:22,979 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:42:22,997 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:42:23,029 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:42:23,049 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:42:23,050 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:42:23,050 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:42:23,050 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:42:23,050 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:42:23,051 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:42:23,051 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:42:23,051 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:42:23,051 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:42:23,052 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:42:23,052 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:42:23,052 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:42:23,052 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:42:23,053 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:42:23,053 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:42:23,053 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:42:23,053 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:42:23,053 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:42:23,123 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:42:23,125 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:42:23,517 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:42:23,525 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:42:23,525 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:42:23,527 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:42:23 BoogieIcfgContainer [2022-10-17 10:42:23,532 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:42:23,534 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:42:23,534 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:42:23,552 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:42:23,553 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:42:22" (1/3) ... [2022-10-17 10:42:23,554 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5155ba09 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:42:23, skipping insertion in model container [2022-10-17 10:42:23,554 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:42:22" (2/3) ... [2022-10-17 10:42:23,554 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5155ba09 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:42:23, skipping insertion in model container [2022-10-17 10:42:23,554 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:42:23" (3/3) ... [2022-10-17 10:42:23,556 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product38.cil.c [2022-10-17 10:42:23,574 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:42:23,575 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:42:23,640 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:42:23,647 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7e3e1117, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:42:23,648 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:42:23,652 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-10-17 10:42:23,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:42:23,664 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:23,665 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:23,665 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:23,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:23,675 INFO L85 PathProgramCache]: Analyzing trace with hash 1803312447, now seen corresponding path program 1 times [2022-10-17 10:42:23,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:23,688 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027225735] [2022-10-17 10:42:23,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:23,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:23,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:23,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:42:23,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:23,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:23,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:23,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027225735] [2022-10-17 10:42:23,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027225735] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:23,963 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:23,964 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:42:23,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735813006] [2022-10-17 10:42:23,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:23,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:42:23,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:24,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:42:24,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:42:24,010 INFO L87 Difference]: Start difference. First operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:24,068 INFO L93 Difference]: Finished difference Result 167 states and 228 transitions. [2022-10-17 10:42:24,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:42:24,071 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:42:24,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:24,082 INFO L225 Difference]: With dead ends: 167 [2022-10-17 10:42:24,082 INFO L226 Difference]: Without dead ends: 79 [2022-10-17 10:42:24,087 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:42:24,091 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:24,092 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:42:24,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-10-17 10:42:24,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-10-17 10:42:24,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:42:24,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-10-17 10:42:24,152 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-10-17 10:42:24,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:24,153 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-10-17 10:42:24,154 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,154 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-10-17 10:42:24,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:42:24,160 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:24,160 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:24,161 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:42:24,161 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:24,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:24,162 INFO L85 PathProgramCache]: Analyzing trace with hash 220336758, now seen corresponding path program 1 times [2022-10-17 10:42:24,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:24,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1628638082] [2022-10-17 10:42:24,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:24,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:24,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:42:24,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:24,337 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:24,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1628638082] [2022-10-17 10:42:24,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1628638082] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:24,338 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:24,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:42:24,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937526210] [2022-10-17 10:42:24,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:24,340 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:42:24,340 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:24,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:42:24,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:42:24,342 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:24,358 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2022-10-17 10:42:24,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:42:24,359 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:42:24,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:24,361 INFO L225 Difference]: With dead ends: 122 [2022-10-17 10:42:24,361 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:42:24,362 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:42:24,364 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 13 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:24,365 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:42:24,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:42:24,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:42:24,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 61 states have internal predecessors, (72), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:42:24,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-10-17 10:42:24,377 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-10-17 10:42:24,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:24,378 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-10-17 10:42:24,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,379 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-10-17 10:42:24,380 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-10-17 10:42:24,380 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:24,380 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:24,381 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:42:24,381 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:24,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:24,382 INFO L85 PathProgramCache]: Analyzing trace with hash 753977737, now seen corresponding path program 1 times [2022-10-17 10:42:24,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:24,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684693761] [2022-10-17 10:42:24,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:24,383 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:24,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:24,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:24,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:24,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684693761] [2022-10-17 10:42:24,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [684693761] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:24,525 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:24,525 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:42:24,526 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765007990] [2022-10-17 10:42:24,526 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:24,527 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:42:24,527 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:24,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:42:24,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:42:24,529 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:24,582 INFO L93 Difference]: Finished difference Result 132 states and 173 transitions. [2022-10-17 10:42:24,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:42:24,583 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-10-17 10:42:24,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:24,586 INFO L225 Difference]: With dead ends: 132 [2022-10-17 10:42:24,586 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:42:24,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:42:24,593 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 84 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:24,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 88 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:42:24,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:42:24,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:42:24,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 61 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:42:24,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-10-17 10:42:24,615 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 31 [2022-10-17 10:42:24,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:24,616 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-10-17 10:42:24,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:42:24,616 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-10-17 10:42:24,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-10-17 10:42:24,620 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:24,620 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:24,620 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:42:24,621 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:24,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:24,623 INFO L85 PathProgramCache]: Analyzing trace with hash -1236058631, now seen corresponding path program 1 times [2022-10-17 10:42:24,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:24,623 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662734007] [2022-10-17 10:42:24,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:24,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:24,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:24,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:42:24,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-10-17 10:42:24,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:24,833 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:24,833 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:24,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662734007] [2022-10-17 10:42:24,833 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662734007] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:24,834 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:24,834 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:42:24,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669058067] [2022-10-17 10:42:24,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:24,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:42:24,835 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:24,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:42:24,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:42:24,838 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:42:25,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:25,084 INFO L93 Difference]: Finished difference Result 207 states and 265 transitions. [2022-10-17 10:42:25,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:42:25,085 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-10-17 10:42:25,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:25,090 INFO L225 Difference]: With dead ends: 207 [2022-10-17 10:42:25,090 INFO L226 Difference]: Without dead ends: 145 [2022-10-17 10:42:25,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:42:25,102 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 161 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:25,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 299 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:42:25,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-10-17 10:42:25,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 139. [2022-10-17 10:42:25,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 107 states have (on average 1.280373831775701) internal successors, (137), 114 states have internal predecessors, (137), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:42:25,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 172 transitions. [2022-10-17 10:42:25,127 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 172 transitions. Word has length 41 [2022-10-17 10:42:25,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:25,128 INFO L495 AbstractCegarLoop]: Abstraction has 139 states and 172 transitions. [2022-10-17 10:42:25,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:42:25,128 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 172 transitions. [2022-10-17 10:42:25,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:42:25,130 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:25,130 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:25,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:42:25,130 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:25,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:25,131 INFO L85 PathProgramCache]: Analyzing trace with hash -649911993, now seen corresponding path program 1 times [2022-10-17 10:42:25,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:25,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111904190] [2022-10-17 10:42:25,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:25,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:25,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:25,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:42:25,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:25,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:25,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111904190] [2022-10-17 10:42:25,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2111904190] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:25,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:25,263 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:42:25,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1550607251] [2022-10-17 10:42:25,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:25,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:42:25,264 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:25,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:42:25,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:42:25,265 INFO L87 Difference]: Start difference. First operand 139 states and 172 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:25,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:25,430 INFO L93 Difference]: Finished difference Result 278 states and 348 transitions. [2022-10-17 10:42:25,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:42:25,431 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:42:25,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:25,434 INFO L225 Difference]: With dead ends: 278 [2022-10-17 10:42:25,434 INFO L226 Difference]: Without dead ends: 147 [2022-10-17 10:42:25,436 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:42:25,437 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 58 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:25,438 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 365 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:25,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2022-10-17 10:42:25,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 142. [2022-10-17 10:42:25,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 110 states have (on average 1.2727272727272727) internal successors, (140), 117 states have internal predecessors, (140), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:42:25,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2022-10-17 10:42:25,484 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 45 [2022-10-17 10:42:25,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:25,486 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2022-10-17 10:42:25,486 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:25,486 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2022-10-17 10:42:25,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:42:25,494 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:25,494 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:25,494 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:42:25,494 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:25,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:25,495 INFO L85 PathProgramCache]: Analyzing trace with hash 1956111561, now seen corresponding path program 1 times [2022-10-17 10:42:25,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:25,498 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115187603] [2022-10-17 10:42:25,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:25,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:25,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:25,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:42:25,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:25,664 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:25,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [115187603] [2022-10-17 10:42:25,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [115187603] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:25,665 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:25,665 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:42:25,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [54229218] [2022-10-17 10:42:25,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:25,667 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:42:25,667 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:25,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:42:25,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:42:25,668 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:25,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:25,775 INFO L93 Difference]: Finished difference Result 286 states and 359 transitions. [2022-10-17 10:42:25,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:42:25,777 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:42:25,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:25,783 INFO L225 Difference]: With dead ends: 286 [2022-10-17 10:42:25,783 INFO L226 Difference]: Without dead ends: 152 [2022-10-17 10:42:25,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:42:25,786 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 61 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 288 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:25,788 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 288 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:25,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-10-17 10:42:25,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 144. [2022-10-17 10:42:25,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2678571428571428) internal successors, (142), 119 states have internal predecessors, (142), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:42:25,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 177 transitions. [2022-10-17 10:42:25,823 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 177 transitions. Word has length 45 [2022-10-17 10:42:25,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:25,828 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 177 transitions. [2022-10-17 10:42:25,828 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:25,829 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 177 transitions. [2022-10-17 10:42:25,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:42:25,832 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:25,832 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:25,832 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:42:25,832 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:25,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:25,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1916153909, now seen corresponding path program 1 times [2022-10-17 10:42:25,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:25,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206700615] [2022-10-17 10:42:25,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:25,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:25,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:25,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:25,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:42:25,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,002 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:26,002 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:26,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206700615] [2022-10-17 10:42:26,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206700615] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:26,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:26,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:42:26,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352196762] [2022-10-17 10:42:26,005 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:26,006 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:42:26,006 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:26,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:42:26,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:42:26,007 INFO L87 Difference]: Start difference. First operand 144 states and 177 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:26,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:26,251 INFO L93 Difference]: Finished difference Result 405 states and 519 transitions. [2022-10-17 10:42:26,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:42:26,251 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:42:26,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:26,256 INFO L225 Difference]: With dead ends: 405 [2022-10-17 10:42:26,256 INFO L226 Difference]: Without dead ends: 269 [2022-10-17 10:42:26,257 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:42:26,258 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 196 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:26,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 308 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:42:26,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2022-10-17 10:42:26,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 261. [2022-10-17 10:42:26,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 201 states have (on average 1.2587064676616915) internal successors, (253), 212 states have internal predecessors, (253), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-10-17 10:42:26,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 328 transitions. [2022-10-17 10:42:26,296 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 328 transitions. Word has length 45 [2022-10-17 10:42:26,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:26,297 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 328 transitions. [2022-10-17 10:42:26,297 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:42:26,298 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 328 transitions. [2022-10-17 10:42:26,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-10-17 10:42:26,302 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:26,303 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:26,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:42:26,303 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:26,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:26,304 INFO L85 PathProgramCache]: Analyzing trace with hash -1607715167, now seen corresponding path program 1 times [2022-10-17 10:42:26,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:26,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174952657] [2022-10-17 10:42:26,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:26,311 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:26,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:26,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:42:26,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-10-17 10:42:26,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:26,466 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:26,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174952657] [2022-10-17 10:42:26,466 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174952657] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:26,467 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:26,467 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:42:26,467 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310009298] [2022-10-17 10:42:26,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:26,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:42:26,474 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:26,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:42:26,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:42:26,475 INFO L87 Difference]: Start difference. First operand 261 states and 328 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:42:26,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:26,708 INFO L93 Difference]: Finished difference Result 530 states and 677 transitions. [2022-10-17 10:42:26,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-17 10:42:26,709 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-10-17 10:42:26,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:26,716 INFO L225 Difference]: With dead ends: 530 [2022-10-17 10:42:26,716 INFO L226 Difference]: Without dead ends: 277 [2022-10-17 10:42:26,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:42:26,718 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 113 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 340 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:26,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 340 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:26,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2022-10-17 10:42:26,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 257. [2022-10-17 10:42:26,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 197 states have (on average 1.2233502538071066) internal successors, (241), 208 states have internal predecessors, (241), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-10-17 10:42:26,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 316 transitions. [2022-10-17 10:42:26,748 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 316 transitions. Word has length 47 [2022-10-17 10:42:26,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:26,748 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 316 transitions. [2022-10-17 10:42:26,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:42:26,749 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 316 transitions. [2022-10-17 10:42:26,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-10-17 10:42:26,750 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:26,750 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:26,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:42:26,750 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:26,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:26,751 INFO L85 PathProgramCache]: Analyzing trace with hash 715309297, now seen corresponding path program 1 times [2022-10-17 10:42:26,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:26,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121067546] [2022-10-17 10:42:26,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:26,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:26,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:42:26,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:42:26,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-10-17 10:42:26,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:26,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:26,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:26,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121067546] [2022-10-17 10:42:26,851 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121067546] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:26,852 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:42:26,852 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:42:26,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155014298] [2022-10-17 10:42:26,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:26,852 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:42:26,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:26,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:42:26,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:42:26,853 INFO L87 Difference]: Start difference. First operand 257 states and 316 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:42:27,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:27,092 INFO L93 Difference]: Finished difference Result 473 states and 598 transitions. [2022-10-17 10:42:27,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:42:27,092 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2022-10-17 10:42:27,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:27,096 INFO L225 Difference]: With dead ends: 473 [2022-10-17 10:42:27,096 INFO L226 Difference]: Without dead ends: 471 [2022-10-17 10:42:27,097 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:42:27,098 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 256 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 260 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:27,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [260 Valid, 247 Invalid, 236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:42:27,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 471 states. [2022-10-17 10:42:27,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 471 to 431. [2022-10-17 10:42:27,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 351 states have internal predecessors, (404), 52 states have call successors, (52), 42 states have call predecessors, (52), 48 states have return successors, (94), 51 states have call predecessors, (94), 52 states have call successors, (94) [2022-10-17 10:42:27,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 550 transitions. [2022-10-17 10:42:27,166 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 550 transitions. Word has length 49 [2022-10-17 10:42:27,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:27,166 INFO L495 AbstractCegarLoop]: Abstraction has 431 states and 550 transitions. [2022-10-17 10:42:27,166 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:42:27,167 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 550 transitions. [2022-10-17 10:42:27,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-10-17 10:42:27,169 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:27,169 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:27,169 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:42:27,169 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:27,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:27,170 INFO L85 PathProgramCache]: Analyzing trace with hash 1623088946, now seen corresponding path program 1 times [2022-10-17 10:42:27,170 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:27,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [334748782] [2022-10-17 10:42:27,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:27,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:27,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:42:27,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:27,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:42:27,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:42:27,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-17 10:42:27,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-10-17 10:42:27,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,317 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-17 10:42:27,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:27,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [334748782] [2022-10-17 10:42:27,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [334748782] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:42:27,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2044101035] [2022-10-17 10:42:27,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:27,318 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:42:27,318 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:42:27,320 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:42:27,326 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:42:27,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:27,433 INFO L263 TraceCheckSpWp]: Trace formula consists of 462 conjuncts, 4 conjunts are in the unsatisfiable core [2022-10-17 10:42:27,441 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:42:27,582 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:42:27,582 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:42:27,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2044101035] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:27,582 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:42:27,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2022-10-17 10:42:27,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748075520] [2022-10-17 10:42:27,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:27,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:42:27,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:27,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:42:27,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:42:27,584 INFO L87 Difference]: Start difference. First operand 431 states and 550 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-10-17 10:42:27,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:27,696 INFO L93 Difference]: Finished difference Result 756 states and 980 transitions. [2022-10-17 10:42:27,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:42:27,697 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-10-17 10:42:27,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:27,700 INFO L225 Difference]: With dead ends: 756 [2022-10-17 10:42:27,700 INFO L226 Difference]: Without dead ends: 382 [2022-10-17 10:42:27,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:42:27,703 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 37 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:27,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 193 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:27,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2022-10-17 10:42:27,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 382. [2022-10-17 10:42:27,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 382 states, 292 states have (on average 1.2191780821917808) internal successors, (356), 311 states have internal predecessors, (356), 47 states have call successors, (47), 37 states have call predecessors, (47), 42 states have return successors, (72), 47 states have call predecessors, (72), 47 states have call successors, (72) [2022-10-17 10:42:27,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 475 transitions. [2022-10-17 10:42:27,745 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 475 transitions. Word has length 88 [2022-10-17 10:42:27,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:27,746 INFO L495 AbstractCegarLoop]: Abstraction has 382 states and 475 transitions. [2022-10-17 10:42:27,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-10-17 10:42:27,746 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 475 transitions. [2022-10-17 10:42:27,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-10-17 10:42:27,748 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:27,748 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:27,786 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:42:27,971 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:42:27,971 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:27,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:27,972 INFO L85 PathProgramCache]: Analyzing trace with hash 1045609474, now seen corresponding path program 1 times [2022-10-17 10:42:27,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:27,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443296703] [2022-10-17 10:42:27,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:27,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:27,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:42:28,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:42:28,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:42:28,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:42:28,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-10-17 10:42:28,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-17 10:42:28,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:42:28,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-17 10:42:28,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,271 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 20 proven. 5 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-10-17 10:42:28,272 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:28,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1443296703] [2022-10-17 10:42:28,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1443296703] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:42:28,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [779035081] [2022-10-17 10:42:28,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:28,273 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:42:28,273 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:42:28,274 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:42:28,293 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:42:28,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:28,378 INFO L263 TraceCheckSpWp]: Trace formula consists of 465 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-17 10:42:28,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:42:28,604 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-10-17 10:42:28,604 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:42:28,769 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-17 10:42:28,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [779035081] provided 1 perfect and 1 imperfect interpolant sequences [2022-10-17 10:42:28,770 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-10-17 10:42:28,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [12, 5] total 17 [2022-10-17 10:42:28,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892054560] [2022-10-17 10:42:28,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:28,771 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:42:28,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:28,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:42:28,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=230, Unknown=0, NotChecked=0, Total=272 [2022-10-17 10:42:28,773 INFO L87 Difference]: Start difference. First operand 382 states and 475 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 5 states have internal predecessors, (64), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:42:28,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:28,924 INFO L93 Difference]: Finished difference Result 1094 states and 1400 transitions. [2022-10-17 10:42:28,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-17 10:42:28,925 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 5 states have internal predecessors, (64), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-10-17 10:42:28,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:28,930 INFO L225 Difference]: With dead ends: 1094 [2022-10-17 10:42:28,930 INFO L226 Difference]: Without dead ends: 720 [2022-10-17 10:42:28,932 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 195 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=290, Unknown=0, NotChecked=0, Total=342 [2022-10-17 10:42:28,933 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 51 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 428 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:28,933 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 428 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:28,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2022-10-17 10:42:29,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 646. [2022-10-17 10:42:29,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 646 states, 488 states have (on average 1.1885245901639345) internal successors, (580), 522 states have internal predecessors, (580), 81 states have call successors, (81), 65 states have call predecessors, (81), 76 states have return successors, (125), 81 states have call predecessors, (125), 81 states have call successors, (125) [2022-10-17 10:42:29,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 786 transitions. [2022-10-17 10:42:29,011 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 786 transitions. Word has length 93 [2022-10-17 10:42:29,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:29,011 INFO L495 AbstractCegarLoop]: Abstraction has 646 states and 786 transitions. [2022-10-17 10:42:29,011 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 5 states have internal predecessors, (64), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:42:29,012 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 786 transitions. [2022-10-17 10:42:29,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-10-17 10:42:29,014 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:42:29,015 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:29,053 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:42:29,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-10-17 10:42:29,239 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:42:29,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:42:29,240 INFO L85 PathProgramCache]: Analyzing trace with hash 429876390, now seen corresponding path program 1 times [2022-10-17 10:42:29,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:42:29,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289261377] [2022-10-17 10:42:29,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:29,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:42:29,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:42:29,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:42:29,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:42:29,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:42:29,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:42:29,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-17 10:42:29,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-17 10:42:29,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:42:29,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-10-17 10:42:29,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,528 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 16 proven. 9 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-10-17 10:42:29,528 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:42:29,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289261377] [2022-10-17 10:42:29,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289261377] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:42:29,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [960539007] [2022-10-17 10:42:29,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:42:29,528 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:42:29,529 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:42:29,529 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:42:29,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-17 10:42:29,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:42:29,635 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-17 10:42:29,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:42:29,800 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-17 10:42:29,800 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:42:29,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [960539007] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:42:29,801 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:42:29,801 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [15] total 20 [2022-10-17 10:42:29,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281284628] [2022-10-17 10:42:29,801 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:42:29,802 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:42:29,802 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:42:29,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:42:29,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2022-10-17 10:42:29,803 INFO L87 Difference]: Start difference. First operand 646 states and 786 transitions. Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-17 10:42:29,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:42:29,945 INFO L93 Difference]: Finished difference Result 1174 states and 1422 transitions. [2022-10-17 10:42:29,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:42:29,946 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 97 [2022-10-17 10:42:29,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:42:29,947 INFO L225 Difference]: With dead ends: 1174 [2022-10-17 10:42:29,947 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:42:29,950 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=82, Invalid=424, Unknown=0, NotChecked=0, Total=506 [2022-10-17 10:42:29,951 INFO L413 NwaCegarLoop]: 158 mSDtfsCounter, 46 mSDsluCounter, 657 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 815 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:42:29,951 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 815 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:42:29,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:42:29,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:42:29,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:42:29,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:42:29,953 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2022-10-17 10:42:29,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:42:29,953 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:42:29,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-17 10:42:29,953 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:42:29,953 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:42:29,956 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:42:29,990 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-17 10:42:30,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-10-17 10:42:30,177 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:42:34,838 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 173 179) no Hoare annotation was computed. [2022-10-17 10:42:34,838 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 173 179) the Hoare annotation is: true [2022-10-17 10:42:34,838 INFO L899 garLoopResultBuilder]: For program point L530-1(lines 526 537) no Hoare annotation was computed. [2022-10-17 10:42:34,839 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 526 537) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse7) (or .cse4 .cse6 .cse1 .cse2 .cse7) (or .cse0 .cse5 .cse1 .cse3 .cse7))) [2022-10-17 10:42:34,839 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 526 537) no Hoare annotation was computed. [2022-10-17 10:42:34,839 INFO L899 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2022-10-17 10:42:34,839 INFO L902 garLoopResultBuilder]: At program point L417-1(lines 417 421) the Hoare annotation is: true [2022-10-17 10:42:34,839 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 403 432) no Hoare annotation was computed. [2022-10-17 10:42:34,839 INFO L899 garLoopResultBuilder]: For program point L414(line 414) no Hoare annotation was computed. [2022-10-17 10:42:34,840 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 403 432) the Hoare annotation is: true [2022-10-17 10:42:34,840 INFO L902 garLoopResultBuilder]: At program point L413-2(lines 413 427) the Hoare annotation is: true [2022-10-17 10:42:34,840 INFO L902 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: true [2022-10-17 10:42:34,840 INFO L899 garLoopResultBuilder]: For program point L409-1(line 409) no Hoare annotation was computed. [2022-10-17 10:42:34,840 INFO L902 garLoopResultBuilder]: At program point L428(lines 403 432) the Hoare annotation is: true [2022-10-17 10:42:34,840 INFO L899 garLoopResultBuilder]: For program point L424(line 424) no Hoare annotation was computed. [2022-10-17 10:42:34,841 INFO L895 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5))) [2022-10-17 10:42:34,841 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 510) no Hoare annotation was computed. [2022-10-17 10:42:34,841 INFO L895 garLoopResultBuilder]: At program point L506-2(lines 502 513) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-10-17 10:42:34,841 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 149 172) no Hoare annotation was computed. [2022-10-17 10:42:34,842 INFO L895 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse6 .cse4) (or .cse5 .cse0 .cse1 .cse6 .cse3))) [2022-10-17 10:42:34,842 INFO L895 garLoopResultBuilder]: At program point L226-1(lines 207 231) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= 1 ~systemActive~0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse15)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse6 .cse7 .cse8 .cse15)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse8)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not .cse14)) (.cse13 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0 .cse7 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse4 (and .cse0 .cse7 .cse8) .cse9 .cse5) (or .cse0 .cse1 .cse4 .cse10 .cse11 .cse12) (or .cse4 .cse9 .cse11 .cse13 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4 .cse10 .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse11) (or .cse1 .cse4 .cse9 .cse11 .cse13)))) [2022-10-17 10:42:34,842 INFO L895 garLoopResultBuilder]: At program point L255(lines 248 258) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:42:34,843 INFO L899 garLoopResultBuilder]: For program point L160-1(lines 160 166) no Hoare annotation was computed. [2022-10-17 10:42:34,843 INFO L899 garLoopResultBuilder]: For program point L82(lines 82 92) no Hoare annotation was computed. [2022-10-17 10:42:34,843 INFO L899 garLoopResultBuilder]: For program point L78(lines 78 95) no Hoare annotation was computed. [2022-10-17 10:42:34,843 INFO L895 garLoopResultBuilder]: At program point L78-1(lines 70 98) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse13 (<= 1 ~pumpRunning~0)) (.cse14 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse6 .cse7 .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8)) (.cse0 (not .cse8)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse4 .cse8 .cse5)) (or .cse9 .cse0 .cse1 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse11 .cse0 .cse10 (and .cse3 .cse7 .cse4 .cse8 .cse12) (and .cse13 .cse14 .cse8 .cse12)) (or .cse6 .cse11 .cse0 (and .cse13 .cse4 .cse14 .cse8 .cse5 .cse12) .cse2 (and .cse3 .cse7 .cse4 .cse8 .cse5 .cse12)) (or .cse11 .cse9 .cse0 .cse1 .cse10)))) [2022-10-17 10:42:34,844 INFO L895 garLoopResultBuilder]: At program point L264(lines 259 267) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse10)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4) (or .cse5 .cse6 .cse0 .cse4) (or .cse5 .cse6 .cse7 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or .cse6 .cse0 .cse1 .cse2 .cse3) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse5 .cse6 .cse0 (and (<= 1 ~pumpRunning~0) .cse7 (<= 2 ~waterLevel~0) .cse8) .cse2 (and .cse9 .cse10 .cse8)))))) [2022-10-17 10:42:34,844 INFO L899 garLoopResultBuilder]: For program point L153-1(lines 152 171) no Hoare annotation was computed. [2022-10-17 10:42:34,844 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 223) no Hoare annotation was computed. [2022-10-17 10:42:34,844 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-10-17 10:42:34,844 INFO L899 garLoopResultBuilder]: For program point L211(lines 211 228) no Hoare annotation was computed. [2022-10-17 10:42:34,844 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-10-17 10:42:34,845 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-10-17 10:42:34,845 INFO L899 garLoopResultBuilder]: For program point L253-1(line 253) no Hoare annotation was computed. [2022-10-17 10:42:34,845 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5))) [2022-10-17 10:42:34,846 INFO L895 garLoopResultBuilder]: At program point L245(lines 240 247) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse8)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse9)) (.cse5 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0 .cse7 .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse6) (or .cse2 (and .cse0 .cse7 .cse8) .cse4 .cse6) (or .cse1 .cse2 .cse4 .cse3 .cse5)))) [2022-10-17 10:42:34,846 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 149 172) the Hoare annotation is: (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse8 .cse10)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse9 .cse10)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse2) (or .cse0 .cse1 .cse7 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse5 .cse0 .cse6 .cse7) (or (and .cse8 .cse9 .cse10) .cse5 .cse0 .cse1 .cse7)))) [2022-10-17 10:42:34,846 INFO L895 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= 1 ~systemActive~0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse15)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse6 .cse7 .cse8 .cse15)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse8)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not .cse14)) (.cse13 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0 .cse7 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse4 (and .cse0 .cse7 .cse8) .cse9 .cse5) (or .cse0 .cse1 .cse4 .cse10 .cse11 .cse12) (or .cse4 .cse9 .cse11 .cse13 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4 .cse10 .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse11) (or .cse1 .cse4 .cse9 .cse11 .cse13)))) [2022-10-17 10:42:34,846 INFO L899 garLoopResultBuilder]: For program point L76-1(line 76) no Hoare annotation was computed. [2022-10-17 10:42:34,847 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 149 172) no Hoare annotation was computed. [2022-10-17 10:42:34,847 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-10-17 10:42:34,847 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 538 546) the Hoare annotation is: true [2022-10-17 10:42:34,847 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 538 546) no Hoare annotation was computed. [2022-10-17 10:42:34,847 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 538 546) no Hoare annotation was computed. [2022-10-17 10:42:34,847 INFO L895 garLoopResultBuilder]: At program point L118(lines 114 120) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:42:34,848 INFO L902 garLoopResultBuilder]: At program point L494(lines 475 497) the Hoare annotation is: true [2022-10-17 10:42:34,848 INFO L895 garLoopResultBuilder]: At program point L461(lines 457 463) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:42:34,848 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:42:34,848 INFO L899 garLoopResultBuilder]: For program point L383(lines 383 387) no Hoare annotation was computed. [2022-10-17 10:42:34,848 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:42:34,848 INFO L895 garLoopResultBuilder]: At program point L383-2(lines 375 388) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3))) [2022-10-17 10:42:34,849 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:42:34,849 INFO L899 garLoopResultBuilder]: For program point L346(lines 345 392) no Hoare annotation was computed. [2022-10-17 10:42:34,849 INFO L899 garLoopResultBuilder]: For program point L375(lines 375 388) no Hoare annotation was computed. [2022-10-17 10:42:34,849 INFO L895 garLoopResultBuilder]: At program point L367(line 367) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3))) [2022-10-17 10:42:34,849 INFO L902 garLoopResultBuilder]: At program point L396(lines 335 400) the Hoare annotation is: true [2022-10-17 10:42:34,849 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 361) no Hoare annotation was computed. [2022-10-17 10:42:34,850 INFO L899 garLoopResultBuilder]: For program point L355-1(lines 355 361) no Hoare annotation was computed. [2022-10-17 10:42:34,850 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:42:34,850 INFO L899 garLoopResultBuilder]: For program point L347(lines 347 351) no Hoare annotation was computed. [2022-10-17 10:42:34,850 INFO L895 garLoopResultBuilder]: At program point L393(lines 344 394) the Hoare annotation is: false [2022-10-17 10:42:34,850 INFO L895 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:42:34,850 INFO L895 garLoopResultBuilder]: At program point L67(lines 62 69) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:42:34,851 INFO L895 garLoopResultBuilder]: At program point L125(lines 121 127) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:42:34,851 INFO L902 garLoopResultBuilder]: At program point L472(lines 464 474) the Hoare annotation is: true [2022-10-17 10:42:34,851 INFO L899 garLoopResultBuilder]: For program point L365(lines 365 371) no Hoare annotation was computed. [2022-10-17 10:42:34,851 INFO L899 garLoopResultBuilder]: For program point L365-1(lines 365 371) no Hoare annotation was computed. [2022-10-17 10:42:34,851 INFO L895 garLoopResultBuilder]: At program point L328(lines 323 330) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3))) [2022-10-17 10:42:34,852 INFO L895 garLoopResultBuilder]: At program point L390(lines 345 392) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3))) [2022-10-17 10:42:34,852 INFO L899 garLoopResultBuilder]: For program point L485(lines 485 492) no Hoare annotation was computed. [2022-10-17 10:42:34,852 INFO L895 garLoopResultBuilder]: At program point L357(line 357) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3))) [2022-10-17 10:42:34,852 INFO L899 garLoopResultBuilder]: For program point L485-2(lines 485 492) no Hoare annotation was computed. [2022-10-17 10:42:34,852 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 181 205) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4))) [2022-10-17 10:42:34,853 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 589) no Hoare annotation was computed. [2022-10-17 10:42:34,853 INFO L895 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse5)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-10-17 10:42:34,853 INFO L895 garLoopResultBuilder]: At program point L319(lines 304 322) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse3 (and .cse6 (<= 2 ~waterLevel~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 .cse5)))) [2022-10-17 10:42:34,853 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 197) no Hoare annotation was computed. [2022-10-17 10:42:34,854 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 181 205) no Hoare annotation was computed. [2022-10-17 10:42:34,854 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 202) no Hoare annotation was computed. [2022-10-17 10:42:34,854 INFO L899 garLoopResultBuilder]: For program point L313(lines 313 317) no Hoare annotation was computed. [2022-10-17 10:42:34,854 INFO L899 garLoopResultBuilder]: For program point L313-2(lines 313 317) no Hoare annotation was computed. [2022-10-17 10:42:34,854 INFO L895 garLoopResultBuilder]: At program point L237(lines 232 239) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2022-10-17 10:42:34,855 INFO L895 garLoopResultBuilder]: At program point L588(lines 579 592) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4 .cse5) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 .cse5)))) [2022-10-17 10:42:34,855 INFO L895 garLoopResultBuilder]: At program point L200(line 200) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-10-17 10:42:34,855 INFO L899 garLoopResultBuilder]: For program point L200-1(lines 181 205) no Hoare annotation was computed. [2022-10-17 10:42:34,855 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 514 525) no Hoare annotation was computed. [2022-10-17 10:42:34,855 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 514 525) no Hoare annotation was computed. [2022-10-17 10:42:34,856 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 514 525) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-10-17 10:42:34,859 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:42:34,861 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:42:34,898 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:42:34 BoogieIcfgContainer [2022-10-17 10:42:34,898 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:42:34,899 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:42:34,899 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:42:34,899 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:42:34,900 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:42:23" (3/4) ... [2022-10-17 10:42:34,903 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:42:34,909 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:42:34,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:42:34,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:42:34,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:42:34,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:42:34,910 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:42:34,911 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:42:34,920 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-10-17 10:42:34,920 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:42:34,921 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:42:34,921 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:42:34,922 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:42:34,923 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:42:34,923 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:42:34,949 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) [2022-10-17 10:42:34,950 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) [2022-10-17 10:42:34,951 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0)) && (((((((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) [2022-10-17 10:42:34,951 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) [2022-10-17 10:42:34,952 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) [2022-10-17 10:42:34,952 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) [2022-10-17 10:42:34,952 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:42:34,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-10-17 10:42:34,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:42:34,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:42:34,981 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:42:34,984 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:42:34,985 INFO L158 Benchmark]: Toolchain (without parser) took 12685.19ms. Allocated memory was 96.5MB in the beginning and 207.6MB in the end (delta: 111.1MB). Free memory was 51.8MB in the beginning and 138.9MB in the end (delta: -87.0MB). Peak memory consumption was 24.4MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,985 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 69.8MB in the beginning and 69.7MB in the end (delta: 102.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:42:34,986 INFO L158 Benchmark]: CACSL2BoogieTranslator took 529.20ms. Allocated memory is still 96.5MB. Free memory was 51.6MB in the beginning and 61.5MB in the end (delta: -9.9MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,986 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.59ms. Allocated memory is still 96.5MB. Free memory was 61.5MB in the beginning and 59.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,987 INFO L158 Benchmark]: Boogie Preprocessor took 48.51ms. Allocated memory is still 96.5MB. Free memory was 59.1MB in the beginning and 57.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,987 INFO L158 Benchmark]: RCFGBuilder took 581.80ms. Allocated memory is still 96.5MB. Free memory was 57.3MB in the beginning and 38.7MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,988 INFO L158 Benchmark]: TraceAbstraction took 11364.32ms. Allocated memory was 96.5MB in the beginning and 207.6MB in the end (delta: 111.1MB). Free memory was 38.2MB in the beginning and 144.1MB in the end (delta: -105.9MB). Peak memory consumption was 92.6MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,989 INFO L158 Benchmark]: Witness Printer took 85.35ms. Allocated memory is still 207.6MB. Free memory was 144.1MB in the beginning and 138.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-10-17 10:42:34,991 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 69.8MB in the beginning and 69.7MB in the end (delta: 102.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 529.20ms. Allocated memory is still 96.5MB. Free memory was 51.6MB in the beginning and 61.5MB in the end (delta: -9.9MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.59ms. Allocated memory is still 96.5MB. Free memory was 61.5MB in the beginning and 59.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 48.51ms. Allocated memory is still 96.5MB. Free memory was 59.1MB in the beginning and 57.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 581.80ms. Allocated memory is still 96.5MB. Free memory was 57.3MB in the beginning and 38.7MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 11364.32ms. Allocated memory was 96.5MB in the beginning and 207.6MB in the end (delta: 111.1MB). Free memory was 38.2MB in the beginning and 144.1MB in the end (delta: -105.9MB). Peak memory consumption was 92.6MB. Max. memory is 16.1GB. * Witness Printer took 85.35ms. Allocated memory is still 207.6MB. Free memory was 144.1MB in the beginning and 138.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1106 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1076 mSDsluCounter, 3643 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2334 mSDsCounter, 264 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 824 IncrementalHoareTripleChecker+Invalid, 1088 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 264 mSolverCounterUnsat, 1309 mSDtfsCounter, 824 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 551 GetRequests, 463 SyntacticMatches, 1 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 140 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=646occurred in iteration=11, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 161 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1234 PreInvPairs, 1433 NumberOfFragments, 2681 HoareAnnotationTreeSize, 1234 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 9984 FormulaSimplificationTreeSizeReductionInter, 4.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 910 NumberOfCodeBlocks, 910 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 987 ConstructedInterpolants, 0 QuantifiedInterpolants, 2036 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1402 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 220/242 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 464]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 207]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 403]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 345]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0)) && (((((((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || ((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2022-10-17 10:42:35,058 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bdd1a716-a826-49bc-820b-dc646b8d0935/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE