./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:34:34,777 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:34:34,780 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:34:34,832 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:34:34,833 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:34:34,840 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:34:34,842 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:34:34,844 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:34:34,846 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:34:34,847 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:34:34,848 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:34:34,850 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:34:34,850 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:34:34,851 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:34:34,853 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:34:34,854 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:34:34,855 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:34:34,856 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:34:34,862 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:34:34,864 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:34:34,866 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:34:34,873 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:34:34,874 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:34:34,881 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:34:34,885 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:34:34,886 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:34:34,886 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:34:34,887 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:34:34,888 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:34:34,889 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:34:34,889 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:34:34,890 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:34:34,891 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:34:34,892 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:34:34,898 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:34:34,899 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:34:34,900 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:34:34,900 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:34:34,901 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:34:34,901 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:34:34,902 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:34:34,903 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:34:34,971 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:34:34,971 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:34:34,972 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:34:34,972 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:34:34,973 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:34:34,973 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:34:34,974 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:34:34,974 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:34:34,975 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:34:34,975 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:34:34,976 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:34:34,976 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:34:34,977 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:34:34,977 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:34:34,977 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:34:34,977 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:34:34,977 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:34:34,978 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:34:34,978 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:34:34,978 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:34:34,978 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:34:34,979 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:34:34,979 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:34:34,979 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:34:34,980 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:34:34,985 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:34:34,987 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:34:34,987 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:34:34,987 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:34:34,987 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:34:34,988 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:34:34,988 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:34:34,988 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:34:34,988 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2022-10-17 10:34:35,233 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:34:35,254 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:34:35,257 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:34:35,258 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:34:35,259 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:34:35,260 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-10-17 10:34:35,342 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/data/1c93118ef/cb3eaa0a296a46dca8e3b04298e3b01d/FLAG0149b124f [2022-10-17 10:34:35,865 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:34:35,866 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-10-17 10:34:35,878 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/data/1c93118ef/cb3eaa0a296a46dca8e3b04298e3b01d/FLAG0149b124f [2022-10-17 10:34:36,148 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/data/1c93118ef/cb3eaa0a296a46dca8e3b04298e3b01d [2022-10-17 10:34:36,150 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:34:36,151 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:34:36,152 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:34:36,153 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:34:36,163 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:34:36,164 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,165 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@38e526cc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36, skipping insertion in model container [2022-10-17 10:34:36,165 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,174 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:34:36,221 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:34:36,528 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-10-17 10:34:36,637 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:34:36,646 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:34:36,671 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-10-17 10:34:36,719 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:34:36,737 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:34:36,738 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36 WrapperNode [2022-10-17 10:34:36,738 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:34:36,739 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:34:36,739 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:34:36,740 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:34:36,747 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,772 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,824 INFO L138 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 250 [2022-10-17 10:34:36,828 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:34:36,829 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:34:36,830 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:34:36,830 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:34:36,838 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,839 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,845 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,846 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,865 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,879 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,882 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,889 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,891 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:34:36,892 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:34:36,894 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:34:36,895 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:34:36,896 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (1/1) ... [2022-10-17 10:34:36,902 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:34:36,914 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:34:36,926 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:34:36,956 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:34:36,983 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:34:36,983 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:34:36,983 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:34:36,983 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:34:36,983 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:34:36,983 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:34:36,984 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:34:36,984 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:34:36,984 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:34:36,984 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:34:36,984 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:34:36,985 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:34:36,985 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:34:36,985 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-10-17 10:34:36,985 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-10-17 10:34:36,985 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:34:36,985 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:34:36,986 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:34:36,986 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:34:36,986 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:34:37,101 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:34:37,104 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:34:37,543 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:34:37,551 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:34:37,552 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:34:37,554 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:34:37 BoogieIcfgContainer [2022-10-17 10:34:37,554 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:34:37,556 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:34:37,557 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:34:37,560 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:34:37,560 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:34:36" (1/3) ... [2022-10-17 10:34:37,561 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26b141ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:34:37, skipping insertion in model container [2022-10-17 10:34:37,561 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:34:36" (2/3) ... [2022-10-17 10:34:37,562 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26b141ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:34:37, skipping insertion in model container [2022-10-17 10:34:37,562 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:34:37" (3/3) ... [2022-10-17 10:34:37,563 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2022-10-17 10:34:37,579 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:34:37,580 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:34:37,691 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:34:37,700 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@d8889e4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:34:37,701 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:34:37,711 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-10-17 10:34:37,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:34:37,726 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:37,726 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:37,727 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:37,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:37,735 INFO L85 PathProgramCache]: Analyzing trace with hash 238573202, now seen corresponding path program 1 times [2022-10-17 10:34:37,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:37,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139484633] [2022-10-17 10:34:37,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:37,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:37,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:34:38,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:38,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:38,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139484633] [2022-10-17 10:34:38,046 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139484633] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:38,046 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:38,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:34:38,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1535495687] [2022-10-17 10:34:38,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:38,053 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:34:38,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:38,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:34:38,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:34:38,085 INFO L87 Difference]: Start difference. First operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:38,120 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-10-17 10:34:38,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:34:38,122 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:34:38,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:38,132 INFO L225 Difference]: With dead ends: 179 [2022-10-17 10:34:38,132 INFO L226 Difference]: Without dead ends: 85 [2022-10-17 10:34:38,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:34:38,140 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:38,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:34:38,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-10-17 10:34:38,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-10-17 10:34:38,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-10-17 10:34:38,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-10-17 10:34:38,188 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-10-17 10:34:38,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:38,188 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-10-17 10:34:38,189 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,189 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-10-17 10:34:38,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:34:38,191 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:38,192 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:38,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:34:38,192 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:38,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:38,193 INFO L85 PathProgramCache]: Analyzing trace with hash -1313382680, now seen corresponding path program 1 times [2022-10-17 10:34:38,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:38,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1692609018] [2022-10-17 10:34:38,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:38,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:38,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:34:38,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:38,326 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:38,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1692609018] [2022-10-17 10:34:38,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1692609018] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:38,327 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:38,327 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:34:38,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655823903] [2022-10-17 10:34:38,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:38,328 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:34:38,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:38,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:34:38,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:34:38,329 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:38,347 INFO L93 Difference]: Finished difference Result 131 states and 169 transitions. [2022-10-17 10:34:38,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:34:38,348 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:34:38,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:38,350 INFO L225 Difference]: With dead ends: 131 [2022-10-17 10:34:38,350 INFO L226 Difference]: Without dead ends: 76 [2022-10-17 10:34:38,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:34:38,352 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 16 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:38,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:34:38,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-10-17 10:34:38,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-10-17 10:34:38,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:34:38,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-10-17 10:34:38,365 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-10-17 10:34:38,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:38,365 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-10-17 10:34:38,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,365 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-10-17 10:34:38,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-10-17 10:34:38,367 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:38,367 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:38,367 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:34:38,367 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:38,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:38,368 INFO L85 PathProgramCache]: Analyzing trace with hash 418656316, now seen corresponding path program 1 times [2022-10-17 10:34:38,368 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:38,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2076688644] [2022-10-17 10:34:38,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:38,369 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:38,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:34:38,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:38,551 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:38,552 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2076688644] [2022-10-17 10:34:38,552 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2076688644] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:38,552 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:38,552 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:34:38,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [380507573] [2022-10-17 10:34:38,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:38,555 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:34:38,555 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:38,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:34:38,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:34:38,557 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:38,616 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-10-17 10:34:38,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:34:38,618 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-10-17 10:34:38,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:38,620 INFO L225 Difference]: With dead ends: 211 [2022-10-17 10:34:38,620 INFO L226 Difference]: Without dead ends: 143 [2022-10-17 10:34:38,622 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:34:38,623 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 77 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:38,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 208 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:34:38,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-10-17 10:34:38,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 140. [2022-10-17 10:34:38,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-10-17 10:34:38,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 184 transitions. [2022-10-17 10:34:38,660 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 184 transitions. Word has length 30 [2022-10-17 10:34:38,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:38,661 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 184 transitions. [2022-10-17 10:34:38,661 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,661 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 184 transitions. [2022-10-17 10:34:38,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-10-17 10:34:38,663 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:38,663 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:38,664 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:34:38,664 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:38,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:38,665 INFO L85 PathProgramCache]: Analyzing trace with hash -1768755130, now seen corresponding path program 1 times [2022-10-17 10:34:38,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:38,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [57663583] [2022-10-17 10:34:38,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:38,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:38,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:38,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:38,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:38,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:38,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [57663583] [2022-10-17 10:34:38,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [57663583] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:38,833 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:38,833 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:34:38,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99214711] [2022-10-17 10:34:38,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:38,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:34:38,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:38,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:34:38,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:34:38,835 INFO L87 Difference]: Start difference. First operand 140 states and 184 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:38,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:38,952 INFO L93 Difference]: Finished difference Result 402 states and 537 transitions. [2022-10-17 10:34:38,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-17 10:34:38,953 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-10-17 10:34:38,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:38,957 INFO L225 Difference]: With dead ends: 402 [2022-10-17 10:34:38,957 INFO L226 Difference]: Without dead ends: 270 [2022-10-17 10:34:38,959 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:34:38,961 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 66 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:38,961 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 478 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:34:38,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-10-17 10:34:38,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 264. [2022-10-17 10:34:38,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-10-17 10:34:39,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 347 transitions. [2022-10-17 10:34:39,002 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 347 transitions. Word has length 34 [2022-10-17 10:34:39,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:39,002 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 347 transitions. [2022-10-17 10:34:39,002 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:34:39,003 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 347 transitions. [2022-10-17 10:34:39,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-10-17 10:34:39,006 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:39,006 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:39,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:34:39,007 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:39,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:39,007 INFO L85 PathProgramCache]: Analyzing trace with hash 1795843330, now seen corresponding path program 1 times [2022-10-17 10:34:39,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:39,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1587325633] [2022-10-17 10:34:39,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:39,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:39,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:34:39,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-10-17 10:34:39,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,146 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:39,146 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:39,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1587325633] [2022-10-17 10:34:39,146 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1587325633] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:39,146 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:39,147 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:34:39,147 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248557704] [2022-10-17 10:34:39,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:39,147 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:34:39,148 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:39,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:34:39,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:34:39,149 INFO L87 Difference]: Start difference. First operand 264 states and 347 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:34:39,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:39,503 INFO L93 Difference]: Finished difference Result 692 states and 928 transitions. [2022-10-17 10:34:39,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-17 10:34:39,504 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-10-17 10:34:39,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:39,515 INFO L225 Difference]: With dead ends: 692 [2022-10-17 10:34:39,515 INFO L226 Difference]: Without dead ends: 436 [2022-10-17 10:34:39,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:34:39,525 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 111 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:39,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 199 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:34:39,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 436 states. [2022-10-17 10:34:39,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 436 to 422. [2022-10-17 10:34:39,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-10-17 10:34:39,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 541 transitions. [2022-10-17 10:34:39,603 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 541 transitions. Word has length 38 [2022-10-17 10:34:39,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:39,605 INFO L495 AbstractCegarLoop]: Abstraction has 422 states and 541 transitions. [2022-10-17 10:34:39,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:34:39,606 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 541 transitions. [2022-10-17 10:34:39,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-10-17 10:34:39,613 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:39,613 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:39,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:34:39,613 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:39,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:39,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1327873931, now seen corresponding path program 1 times [2022-10-17 10:34:39,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:39,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [312050901] [2022-10-17 10:34:39,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:39,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:39,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:34:39,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:39,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-17 10:34:39,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:39,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:39,830 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:39,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [312050901] [2022-10-17 10:34:39,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [312050901] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:39,831 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:39,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:34:39,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [36212905] [2022-10-17 10:34:39,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:39,833 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:34:39,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:39,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:34:39,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:34:39,835 INFO L87 Difference]: Start difference. First operand 422 states and 541 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:40,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:40,200 INFO L93 Difference]: Finished difference Result 944 states and 1225 transitions. [2022-10-17 10:34:40,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:34:40,201 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-10-17 10:34:40,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:40,205 INFO L225 Difference]: With dead ends: 944 [2022-10-17 10:34:40,205 INFO L226 Difference]: Without dead ends: 530 [2022-10-17 10:34:40,207 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:34:40,208 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 119 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 292 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 292 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:40,208 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 217 Invalid, 340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 292 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:34:40,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-10-17 10:34:40,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 516. [2022-10-17 10:34:40,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-10-17 10:34:40,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 651 transitions. [2022-10-17 10:34:40,261 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 651 transitions. Word has length 48 [2022-10-17 10:34:40,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:40,262 INFO L495 AbstractCegarLoop]: Abstraction has 516 states and 651 transitions. [2022-10-17 10:34:40,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:40,262 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 651 transitions. [2022-10-17 10:34:40,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-10-17 10:34:40,263 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:40,264 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:40,264 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:34:40,264 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:40,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:40,265 INFO L85 PathProgramCache]: Analyzing trace with hash 1278149623, now seen corresponding path program 1 times [2022-10-17 10:34:40,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:40,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220080849] [2022-10-17 10:34:40,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:40,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:40,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:34:40,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:40,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-17 10:34:40,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:40,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:40,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220080849] [2022-10-17 10:34:40,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220080849] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:40,388 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:40,388 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:34:40,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163464313] [2022-10-17 10:34:40,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:40,388 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:34:40,389 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:40,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:34:40,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:34:40,389 INFO L87 Difference]: Start difference. First operand 516 states and 651 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:40,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:40,634 INFO L93 Difference]: Finished difference Result 1058 states and 1371 transitions. [2022-10-17 10:34:40,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:34:40,635 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-10-17 10:34:40,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:40,639 INFO L225 Difference]: With dead ends: 1058 [2022-10-17 10:34:40,639 INFO L226 Difference]: Without dead ends: 550 [2022-10-17 10:34:40,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:34:40,643 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 122 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:40,644 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 190 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:34:40,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 550 states. [2022-10-17 10:34:40,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 550 to 524. [2022-10-17 10:34:40,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-10-17 10:34:40,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 659 transitions. [2022-10-17 10:34:40,714 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 659 transitions. Word has length 48 [2022-10-17 10:34:40,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:40,715 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 659 transitions. [2022-10-17 10:34:40,716 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:40,718 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 659 transitions. [2022-10-17 10:34:40,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-10-17 10:34:40,720 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:40,720 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:40,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:34:40,722 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:40,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:40,722 INFO L85 PathProgramCache]: Analyzing trace with hash 1700851449, now seen corresponding path program 1 times [2022-10-17 10:34:40,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:40,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97398159] [2022-10-17 10:34:40,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:40,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:40,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:34:40,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:40,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-17 10:34:40,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:40,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:40,893 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:40,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97398159] [2022-10-17 10:34:40,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97398159] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:40,894 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:40,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:34:40,894 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631567468] [2022-10-17 10:34:40,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:40,896 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:34:40,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:40,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:34:40,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:34:40,897 INFO L87 Difference]: Start difference. First operand 524 states and 659 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:41,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:41,330 INFO L93 Difference]: Finished difference Result 1526 states and 1999 transitions. [2022-10-17 10:34:41,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-10-17 10:34:41,331 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-10-17 10:34:41,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:41,340 INFO L225 Difference]: With dead ends: 1526 [2022-10-17 10:34:41,340 INFO L226 Difference]: Without dead ends: 1010 [2022-10-17 10:34:41,343 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:34:41,345 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 315 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:41,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 252 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:34:41,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-10-17 10:34:41,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 998. [2022-10-17 10:34:41,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-10-17 10:34:41,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 998 states to 998 states and 1259 transitions. [2022-10-17 10:34:41,458 INFO L78 Accepts]: Start accepts. Automaton has 998 states and 1259 transitions. Word has length 48 [2022-10-17 10:34:41,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:41,458 INFO L495 AbstractCegarLoop]: Abstraction has 998 states and 1259 transitions. [2022-10-17 10:34:41,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:34:41,459 INFO L276 IsEmpty]: Start isEmpty. Operand 998 states and 1259 transitions. [2022-10-17 10:34:41,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-10-17 10:34:41,461 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:41,462 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:41,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:34:41,462 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:41,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:41,462 INFO L85 PathProgramCache]: Analyzing trace with hash -938154221, now seen corresponding path program 1 times [2022-10-17 10:34:41,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:41,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741132650] [2022-10-17 10:34:41,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:41,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:41,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:41,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:34:41,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:41,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:34:41,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:41,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-10-17 10:34:41,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:41,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-17 10:34:41,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:41,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:41,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:41,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741132650] [2022-10-17 10:34:41,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741132650] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:41,617 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:41,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:34:41,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248938193] [2022-10-17 10:34:41,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:41,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:34:41,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:41,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:34:41,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:34:41,619 INFO L87 Difference]: Start difference. First operand 998 states and 1259 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:34:42,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:42,235 INFO L93 Difference]: Finished difference Result 1972 states and 2635 transitions. [2022-10-17 10:34:42,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-17 10:34:42,236 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-10-17 10:34:42,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:42,251 INFO L225 Difference]: With dead ends: 1972 [2022-10-17 10:34:42,251 INFO L226 Difference]: Without dead ends: 1970 [2022-10-17 10:34:42,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:34:42,258 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 427 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 230 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 429 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 230 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:42,258 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [429 Valid, 185 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [230 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-10-17 10:34:42,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1970 states. [2022-10-17 10:34:42,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1970 to 1533. [2022-10-17 10:34:42,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-10-17 10:34:42,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1533 states to 1533 states and 2038 transitions. [2022-10-17 10:34:42,420 INFO L78 Accepts]: Start accepts. Automaton has 1533 states and 2038 transitions. Word has length 52 [2022-10-17 10:34:42,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:42,420 INFO L495 AbstractCegarLoop]: Abstraction has 1533 states and 2038 transitions. [2022-10-17 10:34:42,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:34:42,421 INFO L276 IsEmpty]: Start isEmpty. Operand 1533 states and 2038 transitions. [2022-10-17 10:34:42,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-10-17 10:34:42,426 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:42,427 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:42,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:34:42,427 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:42,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:42,428 INFO L85 PathProgramCache]: Analyzing trace with hash -1573279230, now seen corresponding path program 1 times [2022-10-17 10:34:42,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:42,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274435646] [2022-10-17 10:34:42,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:42,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:42,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:34:42,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:34:42,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-10-17 10:34:42,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:34:42,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:34:42,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-10-17 10:34:42,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:42,547 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:34:42,548 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:42,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274435646] [2022-10-17 10:34:42,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274435646] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:42,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:34:42,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-17 10:34:42,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287785900] [2022-10-17 10:34:42,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:42,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-17 10:34:42,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:42,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-17 10:34:42,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:34:42,550 INFO L87 Difference]: Start difference. First operand 1533 states and 2038 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-10-17 10:34:43,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:43,049 INFO L93 Difference]: Finished difference Result 1800 states and 2379 transitions. [2022-10-17 10:34:43,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-10-17 10:34:43,049 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 82 [2022-10-17 10:34:43,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:43,055 INFO L225 Difference]: With dead ends: 1800 [2022-10-17 10:34:43,055 INFO L226 Difference]: Without dead ends: 769 [2022-10-17 10:34:43,059 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-10-17 10:34:43,060 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 295 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 304 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:43,060 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [304 Valid, 309 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:34:43,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-10-17 10:34:43,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 740. [2022-10-17 10:34:43,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-10-17 10:34:43,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 740 states to 740 states and 961 transitions. [2022-10-17 10:34:43,158 INFO L78 Accepts]: Start accepts. Automaton has 740 states and 961 transitions. Word has length 82 [2022-10-17 10:34:43,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:43,158 INFO L495 AbstractCegarLoop]: Abstraction has 740 states and 961 transitions. [2022-10-17 10:34:43,159 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-10-17 10:34:43,159 INFO L276 IsEmpty]: Start isEmpty. Operand 740 states and 961 transitions. [2022-10-17 10:34:43,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-10-17 10:34:43,162 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:43,162 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:43,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-10-17 10:34:43,162 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:43,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:43,163 INFO L85 PathProgramCache]: Analyzing trace with hash 750648094, now seen corresponding path program 1 times [2022-10-17 10:34:43,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:43,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273764979] [2022-10-17 10:34:43,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:43,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:43,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:34:43,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:34:43,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:43,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:34:43,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:34:43,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-10-17 10:34:43,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-17 10:34:43,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,356 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 11 proven. 13 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-17 10:34:43,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:43,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273764979] [2022-10-17 10:34:43,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273764979] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:34:43,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1405596711] [2022-10-17 10:34:43,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:43,357 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:34:43,357 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:34:43,358 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:34:43,381 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:34:43,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:43,475 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 4 conjunts are in the unsatisfiable core [2022-10-17 10:34:43,485 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:34:43,654 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:34:43,654 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:34:43,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1405596711] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:43,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:34:43,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-10-17 10:34:43,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966992782] [2022-10-17 10:34:43,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:43,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:34:43,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:43,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:34:43,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:34:43,656 INFO L87 Difference]: Start difference. First operand 740 states and 961 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:34:43,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:43,819 INFO L93 Difference]: Finished difference Result 1278 states and 1694 transitions. [2022-10-17 10:34:43,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:34:43,820 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-10-17 10:34:43,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:43,825 INFO L225 Difference]: With dead ends: 1278 [2022-10-17 10:34:43,825 INFO L226 Difference]: Without dead ends: 640 [2022-10-17 10:34:43,828 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:34:43,829 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:43,830 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:34:43,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-10-17 10:34:43,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-10-17 10:34:43,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-10-17 10:34:43,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 770 transitions. [2022-10-17 10:34:43,904 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 770 transitions. Word has length 90 [2022-10-17 10:34:43,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:43,905 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 770 transitions. [2022-10-17 10:34:43,906 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:34:43,906 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2022-10-17 10:34:43,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-10-17 10:34:43,913 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:34:43,913 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:43,952 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:34:44,142 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:34:44,142 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:34:44,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:34:44,142 INFO L85 PathProgramCache]: Analyzing trace with hash -1881348981, now seen corresponding path program 1 times [2022-10-17 10:34:44,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:34:44,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1024946744] [2022-10-17 10:34:44,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:44,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:34:44,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:34:44,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:34:44,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:34:44,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:34:44,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:34:44,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-17 10:34:44,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-10-17 10:34:44,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:34:44,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-10-17 10:34:44,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,370 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-17 10:34:44,370 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:34:44,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1024946744] [2022-10-17 10:34:44,370 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1024946744] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:34:44,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2008565642] [2022-10-17 10:34:44,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:34:44,371 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:34:44,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:34:44,374 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:34:44,392 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:34:44,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:34:44,503 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-17 10:34:44,507 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:34:44,698 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-17 10:34:44,698 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:34:44,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2008565642] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:34:44,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:34:44,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-10-17 10:34:44,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558028283] [2022-10-17 10:34:44,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:34:44,699 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:34:44,699 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:34:44,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:34:44,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-10-17 10:34:44,700 INFO L87 Difference]: Start difference. First operand 640 states and 770 transitions. Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-17 10:34:44,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:34:44,854 INFO L93 Difference]: Finished difference Result 1163 states and 1392 transitions. [2022-10-17 10:34:44,855 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:34:44,855 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 95 [2022-10-17 10:34:44,855 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:34:44,856 INFO L225 Difference]: With dead ends: 1163 [2022-10-17 10:34:44,856 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:34:44,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-10-17 10:34:44,860 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 45 mSDsluCounter, 585 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 744 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:34:44,860 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 744 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:34:44,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:34:44,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:34:44,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:34:44,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:34:44,861 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 95 [2022-10-17 10:34:44,861 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:34:44,862 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:34:44,862 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-17 10:34:44,862 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:34:44,862 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:34:44,865 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:34:44,899 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:34:45,089 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-10-17 10:34:45,091 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:34:50,939 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-10-17 10:34:50,940 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2022-10-17 10:34:50,940 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 469 476) no Hoare annotation was computed. [2022-10-17 10:34:50,940 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2022-10-17 10:34:50,940 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2022-10-17 10:34:50,941 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,941 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-10-17 10:34:50,941 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-10-17 10:34:50,941 INFO L899 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2022-10-17 10:34:50,941 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-10-17 10:34:50,941 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-10-17 10:34:50,942 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-10-17 10:34:50,942 INFO L899 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-10-17 10:34:50,942 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 378 401) no Hoare annotation was computed. [2022-10-17 10:34:50,942 INFO L895 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,942 INFO L899 garLoopResultBuilder]: For program point L482-1(line 482) no Hoare annotation was computed. [2022-10-17 10:34:50,943 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse0 .cse7 (not (= 0 ~systemActive~0))) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10)))) [2022-10-17 10:34:50,943 INFO L899 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2022-10-17 10:34:50,943 INFO L895 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,944 INFO L895 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,944 INFO L895 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse6 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse9)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse9)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse8)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse2 .cse5 .cse7) (or .cse0 .cse1 .cse2 .cse7) (or .cse4 .cse1 .cse2 .cse5 .cse3) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-10-17 10:34:50,944 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse0 .cse1 .cse4 .cse6) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,945 INFO L895 garLoopResultBuilder]: At program point L455-1(lines 436 460) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-10-17 10:34:50,945 INFO L895 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,945 INFO L899 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-10-17 10:34:50,945 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-10-17 10:34:50,945 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,946 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-10-17 10:34:50,946 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-10-17 10:34:50,946 INFO L895 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (<= 1 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse5 (not .cse14)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not .cse15)) (.cse8 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse9 .cse10 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 (and .cse9 .cse10 .cse11) .cse2) (or (and .cse12 .cse10 .cse13 .cse11 .cse3) .cse0 .cse4 .cse5 (and .cse9 .cse10 .cse11 .cse3) .cse1) (or .cse0 .cse4 .cse5 (and .cse12 .cse13 .cse11) .cse7 (and .cse9 .cse10 .cse14 .cse11)) (or .cse5 .cse6 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 .cse3) (and .cse9 .cse10 .cse3)) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-10-17 10:34:50,946 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 378 401) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse6 (not (= 0 ~systemActive~0))) (or .cse5 .cse0 .cse1 .cse7 .cse6) (or .cse1 .cse2 .cse4 .cse7) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-10-17 10:34:50,946 INFO L895 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse10 .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11 .cse12))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse5) .cse6 .cse7) (or .cse3 .cse7 .cse8) (or .cse0 .cse1 .cse6 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse8) (or .cse3 .cse4 .cse0 .cse2) (or .cse4 .cse0 .cse1 .cse6 .cse9)))) [2022-10-17 10:34:50,946 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2022-10-17 10:34:50,947 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-10-17 10:34:50,947 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-10-17 10:34:50,947 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-10-17 10:34:50,947 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-10-17 10:34:50,947 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-10-17 10:34:50,947 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 153 182) the Hoare annotation is: true [2022-10-17 10:34:50,947 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-10-17 10:34:50,948 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-10-17 10:34:50,948 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-10-17 10:34:50,948 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-10-17 10:34:50,948 INFO L899 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-10-17 10:34:50,948 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-10-17 10:34:50,948 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-10-17 10:34:50,949 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-10-17 10:34:50,949 INFO L902 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-10-17 10:34:50,949 INFO L902 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-10-17 10:34:50,949 INFO L895 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-10-17 10:34:50,949 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-10-17 10:34:50,949 INFO L899 garLoopResultBuilder]: For program point L556-1(lines 556 562) no Hoare annotation was computed. [2022-10-17 10:34:50,950 INFO L895 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:34:50,950 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:34:50,950 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:34:50,950 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-10-17 10:34:50,950 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:34:50,950 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-10-17 10:34:50,951 INFO L895 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:34:50,951 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-10-17 10:34:50,951 INFO L902 garLoopResultBuilder]: At program point L367(lines 306 371) the Hoare annotation is: true [2022-10-17 10:34:50,951 INFO L895 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:34:50,951 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-10-17 10:34:50,951 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-10-17 10:34:50,952 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:34:50,952 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-10-17 10:34:50,952 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-10-17 10:34:50,952 INFO L895 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-10-17 10:34:50,952 INFO L895 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:34:50,952 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-10-17 10:34:50,953 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2022-10-17 10:34:50,953 INFO L895 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:34:50,953 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-10-17 10:34:50,953 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-10-17 10:34:50,953 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-10-17 10:34:50,953 INFO L899 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-10-17 10:34:50,954 INFO L895 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-10-17 10:34:50,954 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-10-17 10:34:50,954 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 410 434) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:34:50,954 INFO L895 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-10-17 10:34:50,955 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-10-17 10:34:50,955 INFO L895 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-10-17 10:34:50,955 INFO L899 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-10-17 10:34:50,955 INFO L899 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-10-17 10:34:50,955 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-10-17 10:34:50,956 INFO L899 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-10-17 10:34:50,956 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2022-10-17 10:34:50,956 INFO L895 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-10-17 10:34:50,956 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-10-17 10:34:50,956 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-10-17 10:34:50,956 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2022-10-17 10:34:50,957 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-10-17 10:34:50,957 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-10-17 10:34:50,957 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-10-17 10:34:50,960 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:34:50,962 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:34:51,018 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:34:51 BoogieIcfgContainer [2022-10-17 10:34:51,033 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:34:51,034 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:34:51,034 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:34:51,034 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:34:51,035 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:34:37" (3/4) ... [2022-10-17 10:34:51,038 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:34:51,044 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-10-17 10:34:51,045 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:34:51,045 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:34:51,045 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:34:51,045 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:34:51,045 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:34:51,046 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:34:51,046 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:34:51,063 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-10-17 10:34:51,064 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:34:51,065 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:34:51,066 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:34:51,066 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:34:51,067 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:34:51,067 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:34:51,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-10-17 10:34:51,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-10-17 10:34:51,102 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-10-17 10:34:51,102 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-10-17 10:34:51,102 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) [2022-10-17 10:34:51,103 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:34:51,103 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-10-17 10:34:51,104 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:34:51,104 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-10-17 10:34:51,153 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:34:51,153 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:34:51,154 INFO L158 Benchmark]: Toolchain (without parser) took 15002.79ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 73.9MB in the beginning and 132.8MB in the end (delta: -58.9MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,154 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 98.6MB. Free memory was 68.9MB in the beginning and 68.8MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:34:51,155 INFO L158 Benchmark]: CACSL2BoogieTranslator took 586.15ms. Allocated memory is still 98.6MB. Free memory was 73.7MB in the beginning and 61.6MB in the end (delta: 12.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,155 INFO L158 Benchmark]: Boogie Procedure Inliner took 89.24ms. Allocated memory is still 98.6MB. Free memory was 61.6MB in the beginning and 58.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,156 INFO L158 Benchmark]: Boogie Preprocessor took 62.01ms. Allocated memory is still 98.6MB. Free memory was 58.9MB in the beginning and 57.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,156 INFO L158 Benchmark]: RCFGBuilder took 662.23ms. Allocated memory is still 98.6MB. Free memory was 57.1MB in the beginning and 38.5MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,157 INFO L158 Benchmark]: TraceAbstraction took 13477.03ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 38.0MB in the beginning and 138.1MB in the end (delta: -100.1MB). Peak memory consumption was 96.3MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,158 INFO L158 Benchmark]: Witness Printer took 119.51ms. Allocated memory is still 209.7MB. Free memory was 138.1MB in the beginning and 132.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-10-17 10:34:51,160 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 98.6MB. Free memory was 68.9MB in the beginning and 68.8MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 586.15ms. Allocated memory is still 98.6MB. Free memory was 73.7MB in the beginning and 61.6MB in the end (delta: 12.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 89.24ms. Allocated memory is still 98.6MB. Free memory was 61.6MB in the beginning and 58.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 62.01ms. Allocated memory is still 98.6MB. Free memory was 58.9MB in the beginning and 57.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 662.23ms. Allocated memory is still 98.6MB. Free memory was 57.1MB in the beginning and 38.5MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13477.03ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 38.0MB in the beginning and 138.1MB in the end (delta: -100.1MB). Peak memory consumption was 96.3MB. Max. memory is 16.1GB. * Witness Printer took 119.51ms. Allocated memory is still 209.7MB. Free memory was 138.1MB in the beginning and 132.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1661 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1631 mSDsluCounter, 3265 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1922 mSDsCounter, 609 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1753 IncrementalHoareTripleChecker+Invalid, 2362 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 609 mSolverCounterUnsat, 1343 mSDtfsCounter, 1753 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 381 GetRequests, 284 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1533occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 541 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2171 PreInvPairs, 2420 NumberOfFragments, 2652 HoareAnnotationTreeSize, 2171 FomulaSimplifications, 932 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 43 FomulaSimplificationsInter, 17184 FormulaSimplificationTreeSizeReductionInter, 5.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 801 NumberOfCodeBlocks, 801 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 787 ConstructedInterpolants, 0 QuantifiedInterpolants, 1485 SizeOfPredicates, 5 NumberOfNonLiveVariables, 935 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 141/157 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-10-17 10:34:51,263 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2fddcf5a-9118-43cb-bdfe-a0ecaca7b528/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE