./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:25:41,838 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:25:41,841 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:25:41,875 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:25:41,876 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:25:41,878 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:25:41,880 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:25:41,883 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:25:41,886 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:25:41,887 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:25:41,889 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:25:41,891 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:25:41,892 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:25:41,893 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:25:41,897 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:25:41,902 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:25:41,906 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:25:41,910 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:25:41,912 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:25:41,916 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:25:41,922 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:25:41,928 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:25:41,935 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:25:41,936 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:25:41,941 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:25:41,944 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:25:41,945 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:25:41,946 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:25:41,948 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:25:41,949 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:25:41,950 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:25:41,951 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:25:41,953 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:25:41,955 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:25:41,956 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:25:41,956 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:25:41,957 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:25:41,957 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:25:41,958 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:25:41,959 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:25:41,960 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:25:41,960 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:25:41,992 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:25:41,993 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:25:41,993 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:25:41,993 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:25:41,994 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:25:41,994 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:25:41,995 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:25:41,996 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:25:41,996 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:25:41,996 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:25:41,996 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:25:41,997 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:25:41,997 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:25:41,997 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:25:41,997 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:25:41,998 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:25:41,998 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:25:41,998 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:25:41,998 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:25:41,999 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:25:41,999 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:25:41,999 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:25:41,999 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:25:42,000 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:25:42,000 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:25:42,000 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:25:42,001 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:25:42,001 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:25:42,001 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:25:42,001 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:25:42,002 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:25:42,002 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:25:42,002 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:25:42,002 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d [2022-10-17 10:25:42,375 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:25:42,421 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:25:42,424 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:25:42,435 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:25:42,435 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:25:42,437 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-10-17 10:25:42,533 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/data/ca4196e0e/0f2197519d9244ee91931bcd76165043/FLAG0c44cf786 [2022-10-17 10:25:43,072 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:25:43,073 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-10-17 10:25:43,090 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/data/ca4196e0e/0f2197519d9244ee91931bcd76165043/FLAG0c44cf786 [2022-10-17 10:25:43,349 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/data/ca4196e0e/0f2197519d9244ee91931bcd76165043 [2022-10-17 10:25:43,352 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:25:43,354 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:25:43,356 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:25:43,356 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:25:43,360 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:25:43,361 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:25:43" (1/1) ... [2022-10-17 10:25:43,363 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e4a672b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:43, skipping insertion in model container [2022-10-17 10:25:43,363 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:25:43" (1/1) ... [2022-10-17 10:25:43,372 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:25:43,441 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:25:43,949 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-10-17 10:25:43,955 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:25:43,966 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:25:44,096 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-10-17 10:25:44,115 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:25:44,143 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:25:44,143 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44 WrapperNode [2022-10-17 10:25:44,144 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:25:44,145 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:25:44,145 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:25:44,146 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:25:44,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,185 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,220 INFO L138 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 259 [2022-10-17 10:25:44,221 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:25:44,221 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:25:44,222 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:25:44,222 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:25:44,233 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,233 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,236 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,236 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,245 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,250 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,267 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,269 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,272 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:25:44,272 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:25:44,273 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:25:44,273 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:25:44,280 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (1/1) ... [2022-10-17 10:25:44,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:25:44,301 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:25:44,319 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:25:44,335 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:25:44,378 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:25:44,379 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:25:44,379 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:25:44,379 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:25:44,379 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:25:44,379 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:25:44,379 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:25:44,380 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:25:44,380 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:25:44,381 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:25:44,381 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:25:44,381 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:25:44,381 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:25:44,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:25:44,381 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:25:44,382 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:25:44,382 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:25:44,382 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:25:44,472 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:25:44,475 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:25:44,989 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:25:44,999 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:25:44,999 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:25:45,018 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:25:45 BoogieIcfgContainer [2022-10-17 10:25:45,018 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:25:45,022 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:25:45,022 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:25:45,031 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:25:45,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:25:43" (1/3) ... [2022-10-17 10:25:45,032 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c4e15f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:25:45, skipping insertion in model container [2022-10-17 10:25:45,032 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:25:44" (2/3) ... [2022-10-17 10:25:45,033 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c4e15f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:25:45, skipping insertion in model container [2022-10-17 10:25:45,033 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:25:45" (3/3) ... [2022-10-17 10:25:45,034 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product49.cil.c [2022-10-17 10:25:45,064 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:25:45,065 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:25:45,131 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:25:45,150 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39a63877, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:25:45,150 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:25:45,155 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:25:45,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:25:45,167 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:45,168 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:45,168 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:45,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:45,175 INFO L85 PathProgramCache]: Analyzing trace with hash -1277571174, now seen corresponding path program 1 times [2022-10-17 10:25:45,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:45,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796659035] [2022-10-17 10:25:45,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:45,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:45,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:45,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:25:45,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:45,455 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:45,456 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:45,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796659035] [2022-10-17 10:25:45,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796659035] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:45,457 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:45,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:25:45,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207063322] [2022-10-17 10:25:45,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:45,466 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:25:45,466 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:45,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:25:45,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:25:45,521 INFO L87 Difference]: Start difference. First operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:45,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:45,591 INFO L93 Difference]: Finished difference Result 167 states and 228 transitions. [2022-10-17 10:25:45,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:25:45,595 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:25:45,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:45,605 INFO L225 Difference]: With dead ends: 167 [2022-10-17 10:25:45,605 INFO L226 Difference]: Without dead ends: 79 [2022-10-17 10:25:45,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:25:45,614 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:45,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:25:45,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-10-17 10:25:45,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-10-17 10:25:45,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-10-17 10:25:45,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-10-17 10:25:45,672 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-10-17 10:25:45,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:45,673 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-10-17 10:25:45,674 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:45,674 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-10-17 10:25:45,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:25:45,677 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:45,677 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:45,678 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:25:45,678 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:45,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:45,679 INFO L85 PathProgramCache]: Analyzing trace with hash -941221246, now seen corresponding path program 1 times [2022-10-17 10:25:45,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:45,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729062614] [2022-10-17 10:25:45,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:45,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:45,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:45,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:25:45,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:45,852 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:45,853 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:45,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729062614] [2022-10-17 10:25:45,853 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729062614] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:45,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:45,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:25:45,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1718177904] [2022-10-17 10:25:45,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:45,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:25:45,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:45,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:25:45,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:25:45,857 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:45,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:45,880 INFO L93 Difference]: Finished difference Result 123 states and 159 transitions. [2022-10-17 10:25:45,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:25:45,881 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:25:45,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:45,883 INFO L225 Difference]: With dead ends: 123 [2022-10-17 10:25:45,883 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:25:45,884 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:25:45,886 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 12 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:45,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 162 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:25:45,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:25:45,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:25:45,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-10-17 10:25:45,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-10-17 10:25:45,900 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-10-17 10:25:45,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:45,900 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-10-17 10:25:45,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:45,900 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-10-17 10:25:45,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-10-17 10:25:45,902 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:45,902 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:45,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:25:45,903 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:45,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:45,904 INFO L85 PathProgramCache]: Analyzing trace with hash -913943674, now seen corresponding path program 1 times [2022-10-17 10:25:45,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:45,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042502969] [2022-10-17 10:25:45,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:45,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:45,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:46,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:46,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:46,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042502969] [2022-10-17 10:25:46,184 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042502969] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:46,185 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:46,185 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:25:46,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [925394218] [2022-10-17 10:25:46,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:46,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:25:46,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:46,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:25:46,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:25:46,188 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:46,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:46,397 INFO L93 Difference]: Finished difference Result 132 states and 173 transitions. [2022-10-17 10:25:46,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:25:46,398 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-10-17 10:25:46,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:46,401 INFO L225 Difference]: With dead ends: 132 [2022-10-17 10:25:46,401 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:25:46,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:25:46,404 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 176 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:46,405 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 189 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:25:46,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:25:46,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:25:46,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-10-17 10:25:46,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-10-17 10:25:46,425 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 30 [2022-10-17 10:25:46,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:46,426 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-10-17 10:25:46,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:25:46,426 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-10-17 10:25:46,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-10-17 10:25:46,431 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:46,431 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:46,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:25:46,432 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:46,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:46,434 INFO L85 PathProgramCache]: Analyzing trace with hash 1798308510, now seen corresponding path program 1 times [2022-10-17 10:25:46,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:46,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249072433] [2022-10-17 10:25:46,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:46,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:46,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:46,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:25:46,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-10-17 10:25:46,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:46,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:46,688 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:46,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249072433] [2022-10-17 10:25:46,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249072433] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:46,689 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:46,689 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:25:46,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099938013] [2022-10-17 10:25:46,689 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:46,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:25:46,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:46,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:25:46,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:25:46,691 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:25:46,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:46,896 INFO L93 Difference]: Finished difference Result 206 states and 264 transitions. [2022-10-17 10:25:46,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:25:46,896 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-10-17 10:25:46,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:46,899 INFO L225 Difference]: With dead ends: 206 [2022-10-17 10:25:46,899 INFO L226 Difference]: Without dead ends: 144 [2022-10-17 10:25:46,900 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:25:46,901 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 167 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:46,902 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 300 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:25:46,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2022-10-17 10:25:46,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 138. [2022-10-17 10:25:46,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 138 states, 107 states have (on average 1.2897196261682242) internal successors, (138), 114 states have internal predecessors, (138), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-10-17 10:25:46,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 171 transitions. [2022-10-17 10:25:46,930 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 171 transitions. Word has length 40 [2022-10-17 10:25:46,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:46,930 INFO L495 AbstractCegarLoop]: Abstraction has 138 states and 171 transitions. [2022-10-17 10:25:46,931 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:25:46,931 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 171 transitions. [2022-10-17 10:25:46,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-10-17 10:25:46,933 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:46,933 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:46,933 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:25:46,933 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:46,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:46,934 INFO L85 PathProgramCache]: Analyzing trace with hash 1579167755, now seen corresponding path program 1 times [2022-10-17 10:25:46,934 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:46,935 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [84889934] [2022-10-17 10:25:46,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:46,935 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:46,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:47,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:25:47,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:47,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:47,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [84889934] [2022-10-17 10:25:47,066 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [84889934] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:47,066 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:47,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:25:47,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945883504] [2022-10-17 10:25:47,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:47,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:25:47,068 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:47,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:25:47,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:25:47,069 INFO L87 Difference]: Start difference. First operand 138 states and 171 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:47,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:47,236 INFO L93 Difference]: Finished difference Result 276 states and 346 transitions. [2022-10-17 10:25:47,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:25:47,237 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-10-17 10:25:47,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:47,239 INFO L225 Difference]: With dead ends: 276 [2022-10-17 10:25:47,240 INFO L226 Difference]: Without dead ends: 146 [2022-10-17 10:25:47,241 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:25:47,242 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 63 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:47,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 367 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:25:47,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-10-17 10:25:47,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 141. [2022-10-17 10:25:47,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 110 states have (on average 1.2818181818181817) internal successors, (141), 117 states have internal predecessors, (141), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-10-17 10:25:47,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 174 transitions. [2022-10-17 10:25:47,269 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 174 transitions. Word has length 44 [2022-10-17 10:25:47,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:47,269 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 174 transitions. [2022-10-17 10:25:47,270 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:47,270 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 174 transitions. [2022-10-17 10:25:47,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-10-17 10:25:47,272 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:47,272 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:47,272 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:25:47,272 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:47,273 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:47,273 INFO L85 PathProgramCache]: Analyzing trace with hash -109775987, now seen corresponding path program 1 times [2022-10-17 10:25:47,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:47,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947191318] [2022-10-17 10:25:47,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:47,274 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:47,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:47,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:25:47,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:47,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:47,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947191318] [2022-10-17 10:25:47,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947191318] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:47,484 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:47,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:25:47,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [462024962] [2022-10-17 10:25:47,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:47,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:25:47,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:47,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:25:47,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:25:47,488 INFO L87 Difference]: Start difference. First operand 141 states and 174 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:47,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:47,637 INFO L93 Difference]: Finished difference Result 284 states and 357 transitions. [2022-10-17 10:25:47,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:25:47,637 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-10-17 10:25:47,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:47,640 INFO L225 Difference]: With dead ends: 284 [2022-10-17 10:25:47,640 INFO L226 Difference]: Without dead ends: 151 [2022-10-17 10:25:47,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:25:47,642 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 65 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:47,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 289 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:25:47,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-10-17 10:25:47,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 143. [2022-10-17 10:25:47,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 112 states have (on average 1.2767857142857142) internal successors, (143), 119 states have internal predecessors, (143), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-10-17 10:25:47,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 176 transitions. [2022-10-17 10:25:47,667 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 176 transitions. Word has length 44 [2022-10-17 10:25:47,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:47,668 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 176 transitions. [2022-10-17 10:25:47,668 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:47,668 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 176 transitions. [2022-10-17 10:25:47,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-10-17 10:25:47,670 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:47,670 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:47,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:25:47,670 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:47,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:47,671 INFO L85 PathProgramCache]: Analyzing trace with hash 312925839, now seen corresponding path program 1 times [2022-10-17 10:25:47,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:47,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977700856] [2022-10-17 10:25:47,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:47,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:47,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:47,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:25:47,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:47,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:47,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:47,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977700856] [2022-10-17 10:25:47,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1977700856] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:47,822 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:47,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:25:47,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701991617] [2022-10-17 10:25:47,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:47,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:25:47,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:47,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:25:47,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:25:47,824 INFO L87 Difference]: Start difference. First operand 143 states and 176 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:48,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:48,100 INFO L93 Difference]: Finished difference Result 400 states and 514 transitions. [2022-10-17 10:25:48,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:25:48,101 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-10-17 10:25:48,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:48,105 INFO L225 Difference]: With dead ends: 400 [2022-10-17 10:25:48,105 INFO L226 Difference]: Without dead ends: 265 [2022-10-17 10:25:48,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:25:48,107 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 198 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:48,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 308 Invalid, 186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:25:48,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-10-17 10:25:48,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 257. [2022-10-17 10:25:48,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 198 states have (on average 1.2676767676767677) internal successors, (251), 209 states have internal predecessors, (251), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-10-17 10:25:48,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 324 transitions. [2022-10-17 10:25:48,146 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 324 transitions. Word has length 44 [2022-10-17 10:25:48,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:48,147 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 324 transitions. [2022-10-17 10:25:48,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:25:48,147 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 324 transitions. [2022-10-17 10:25:48,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-10-17 10:25:48,149 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:48,150 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:48,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:25:48,150 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:48,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:48,151 INFO L85 PathProgramCache]: Analyzing trace with hash 299238822, now seen corresponding path program 1 times [2022-10-17 10:25:48,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:48,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [398529330] [2022-10-17 10:25:48,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:48,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:48,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:25:48,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:25:48,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-17 10:25:48,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:48,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:48,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [398529330] [2022-10-17 10:25:48,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [398529330] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:48,314 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:48,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:25:48,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26417864] [2022-10-17 10:25:48,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:48,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:25:48,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:48,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:25:48,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:25:48,316 INFO L87 Difference]: Start difference. First operand 257 states and 324 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:25:48,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:48,689 INFO L93 Difference]: Finished difference Result 755 states and 978 transitions. [2022-10-17 10:25:48,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-17 10:25:48,689 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-10-17 10:25:48,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:48,700 INFO L225 Difference]: With dead ends: 755 [2022-10-17 10:25:48,701 INFO L226 Difference]: Without dead ends: 506 [2022-10-17 10:25:48,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:25:48,704 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 146 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 353 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:48,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 353 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:25:48,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 506 states. [2022-10-17 10:25:48,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 506 to 486. [2022-10-17 10:25:48,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 369 states have (on average 1.2249322493224932) internal successors, (452), 390 states have internal predecessors, (452), 58 states have call successors, (58), 56 states have call predecessors, (58), 58 states have return successors, (93), 58 states have call predecessors, (93), 58 states have call successors, (93) [2022-10-17 10:25:48,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 603 transitions. [2022-10-17 10:25:48,784 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 603 transitions. Word has length 46 [2022-10-17 10:25:48,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:48,786 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 603 transitions. [2022-10-17 10:25:48,786 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:25:48,787 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 603 transitions. [2022-10-17 10:25:48,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-10-17 10:25:48,788 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:48,788 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:48,788 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:25:48,789 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:48,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:48,789 INFO L85 PathProgramCache]: Analyzing trace with hash -658311774, now seen corresponding path program 1 times [2022-10-17 10:25:48,789 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:48,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000035078] [2022-10-17 10:25:48,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:48,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:48,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:25:48,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:25:48,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:25:48,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:48,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-17 10:25:48,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,006 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:49,006 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:49,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000035078] [2022-10-17 10:25:49,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000035078] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:49,007 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:49,007 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:25:49,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1539797350] [2022-10-17 10:25:49,008 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:49,009 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:25:49,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:49,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:25:49,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:25:49,010 INFO L87 Difference]: Start difference. First operand 486 states and 603 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:25:49,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:49,493 INFO L93 Difference]: Finished difference Result 980 states and 1227 transitions. [2022-10-17 10:25:49,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-10-17 10:25:49,494 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-10-17 10:25:49,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:49,499 INFO L225 Difference]: With dead ends: 980 [2022-10-17 10:25:49,499 INFO L226 Difference]: Without dead ends: 502 [2022-10-17 10:25:49,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-10-17 10:25:49,504 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 175 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 381 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:49,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 188 Invalid, 381 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:25:49,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-10-17 10:25:49,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 482. [2022-10-17 10:25:49,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 365 states have (on average 1.2054794520547945) internal successors, (440), 386 states have internal predecessors, (440), 58 states have call successors, (58), 56 states have call predecessors, (58), 58 states have return successors, (93), 58 states have call predecessors, (93), 58 states have call successors, (93) [2022-10-17 10:25:49,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 591 transitions. [2022-10-17 10:25:49,590 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 591 transitions. Word has length 50 [2022-10-17 10:25:49,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:49,590 INFO L495 AbstractCegarLoop]: Abstraction has 482 states and 591 transitions. [2022-10-17 10:25:49,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:25:49,591 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 591 transitions. [2022-10-17 10:25:49,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-10-17 10:25:49,593 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:49,594 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:49,594 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:25:49,594 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:49,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:49,595 INFO L85 PathProgramCache]: Analyzing trace with hash -1829706971, now seen corresponding path program 1 times [2022-10-17 10:25:49,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:49,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [479862072] [2022-10-17 10:25:49,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:49,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:49,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:25:49,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:25:49,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-10-17 10:25:49,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-17 10:25:49,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:49,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:49,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:49,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [479862072] [2022-10-17 10:25:49,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [479862072] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:49,761 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:25:49,761 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:25:49,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300977898] [2022-10-17 10:25:49,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:49,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:25:49,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:49,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:25:49,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:25:49,766 INFO L87 Difference]: Start difference. First operand 482 states and 591 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:25:50,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:50,348 INFO L93 Difference]: Finished difference Result 855 states and 1065 transitions. [2022-10-17 10:25:50,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-17 10:25:50,356 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-10-17 10:25:50,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:50,383 INFO L225 Difference]: With dead ends: 855 [2022-10-17 10:25:50,383 INFO L226 Difference]: Without dead ends: 853 [2022-10-17 10:25:50,384 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:25:50,385 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 378 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 249 mSolverCounterSat, 144 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 144 IncrementalHoareTripleChecker+Valid, 249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:50,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 166 Invalid, 393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [144 Valid, 249 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-10-17 10:25:50,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 853 states. [2022-10-17 10:25:50,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 853 to 689. [2022-10-17 10:25:50,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 689 states, 526 states have (on average 1.209125475285171) internal successors, (636), 562 states have internal predecessors, (636), 80 states have call successors, (80), 70 states have call predecessors, (80), 82 states have return successors, (146), 79 states have call predecessors, (146), 80 states have call successors, (146) [2022-10-17 10:25:50,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 689 states to 689 states and 862 transitions. [2022-10-17 10:25:50,495 INFO L78 Accepts]: Start accepts. Automaton has 689 states and 862 transitions. Word has length 52 [2022-10-17 10:25:50,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:50,495 INFO L495 AbstractCegarLoop]: Abstraction has 689 states and 862 transitions. [2022-10-17 10:25:50,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:25:50,496 INFO L276 IsEmpty]: Start isEmpty. Operand 689 states and 862 transitions. [2022-10-17 10:25:50,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-10-17 10:25:50,500 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:50,500 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:50,500 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-10-17 10:25:50,501 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:50,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:50,502 INFO L85 PathProgramCache]: Analyzing trace with hash 16335344, now seen corresponding path program 1 times [2022-10-17 10:25:50,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:50,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396654920] [2022-10-17 10:25:50,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:50,503 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:50,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:25:50,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:25:50,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:25:50,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:25:50,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:25:50,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-10-17 10:25:50,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-17 10:25:50,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,803 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-17 10:25:50,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:50,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396654920] [2022-10-17 10:25:50,803 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1396654920] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:25:50,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1636221853] [2022-10-17 10:25:50,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:50,804 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:50,804 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:25:50,810 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:25:50,818 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:25:50,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:50,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 4 conjunts are in the unsatisfiable core [2022-10-17 10:25:50,960 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:25:51,126 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:51,126 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:25:51,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1636221853] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:51,127 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:25:51,127 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-10-17 10:25:51,127 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416834992] [2022-10-17 10:25:51,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:51,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:25:51,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:51,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:25:51,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:25:51,131 INFO L87 Difference]: Start difference. First operand 689 states and 862 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:25:51,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:51,266 INFO L93 Difference]: Finished difference Result 1227 states and 1554 transitions. [2022-10-17 10:25:51,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:25:51,267 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-10-17 10:25:51,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:51,274 INFO L225 Difference]: With dead ends: 1227 [2022-10-17 10:25:51,274 INFO L226 Difference]: Without dead ends: 640 [2022-10-17 10:25:51,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:25:51,278 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:51,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:25:51,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-10-17 10:25:51,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-10-17 10:25:51,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 488 states have (on average 1.2008196721311475) internal successors, (586), 522 states have internal predecessors, (586), 75 states have call successors, (75), 65 states have call predecessors, (75), 76 states have return successors, (119), 75 states have call predecessors, (119), 75 states have call successors, (119) [2022-10-17 10:25:51,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 780 transitions. [2022-10-17 10:25:51,384 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 780 transitions. Word has length 90 [2022-10-17 10:25:51,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:51,385 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 780 transitions. [2022-10-17 10:25:51,386 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:25:51,386 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 780 transitions. [2022-10-17 10:25:51,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-10-17 10:25:51,392 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:51,392 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:51,440 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:25:51,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:51,618 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:51,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:51,619 INFO L85 PathProgramCache]: Analyzing trace with hash 1128084440, now seen corresponding path program 1 times [2022-10-17 10:25:51,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:51,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876070946] [2022-10-17 10:25:51,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:51,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:51,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:25:51,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:25:51,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:25:51,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:25:51,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:25:51,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-17 10:25:51,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:25:51,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-17 10:25:51,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:51,946 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 19 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-10-17 10:25:51,947 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:51,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876070946] [2022-10-17 10:25:51,947 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876070946] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:25:51,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1599448702] [2022-10-17 10:25:51,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:51,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:51,948 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:25:51,949 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:25:51,974 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:25:52,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:52,104 INFO L263 TraceCheckSpWp]: Trace formula consists of 468 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-17 10:25:52,116 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:25:52,246 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:25:52,247 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:25:52,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1599448702] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:52,247 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:25:52,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-10-17 10:25:52,248 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424506281] [2022-10-17 10:25:52,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:52,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:25:52,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:52,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:25:52,258 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-10-17 10:25:52,258 INFO L87 Difference]: Start difference. First operand 640 states and 780 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-10-17 10:25:52,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:52,519 INFO L93 Difference]: Finished difference Result 1641 states and 2101 transitions. [2022-10-17 10:25:52,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:25:52,520 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 93 [2022-10-17 10:25:52,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:52,529 INFO L225 Difference]: With dead ends: 1641 [2022-10-17 10:25:52,529 INFO L226 Difference]: Without dead ends: 1103 [2022-10-17 10:25:52,535 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 105 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2022-10-17 10:25:52,536 INFO L413 NwaCegarLoop]: 160 mSDtfsCounter, 172 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 626 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:52,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 626 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:25:52,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1103 states. [2022-10-17 10:25:52,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1103 to 903. [2022-10-17 10:25:52,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 903 states, 686 states have (on average 1.2011661807580174) internal successors, (824), 733 states have internal predecessors, (824), 107 states have call successors, (107), 95 states have call predecessors, (107), 109 states have return successors, (173), 102 states have call predecessors, (173), 107 states have call successors, (173) [2022-10-17 10:25:52,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 903 states to 903 states and 1104 transitions. [2022-10-17 10:25:52,689 INFO L78 Accepts]: Start accepts. Automaton has 903 states and 1104 transitions. Word has length 93 [2022-10-17 10:25:52,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:52,689 INFO L495 AbstractCegarLoop]: Abstraction has 903 states and 1104 transitions. [2022-10-17 10:25:52,690 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-10-17 10:25:52,690 INFO L276 IsEmpty]: Start isEmpty. Operand 903 states and 1104 transitions. [2022-10-17 10:25:52,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-10-17 10:25:52,693 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:25:52,693 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:52,736 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:25:52,910 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:52,910 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:25:52,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:25:52,911 INFO L85 PathProgramCache]: Analyzing trace with hash 994070934, now seen corresponding path program 1 times [2022-10-17 10:25:52,911 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:25:52,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [552536701] [2022-10-17 10:25:52,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:52,911 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:25:52,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:25:53,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:25:53,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:25:53,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:25:53,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:25:53,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-17 10:25:53,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:25:53,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-17 10:25:53,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,099 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-10-17 10:25:53,100 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:25:53,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [552536701] [2022-10-17 10:25:53,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [552536701] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:25:53,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [12313927] [2022-10-17 10:25:53,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:25:53,101 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:53,101 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:25:53,102 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:25:53,126 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-17 10:25:53,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:25:53,239 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 5 conjunts are in the unsatisfiable core [2022-10-17 10:25:53,252 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:25:53,311 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-17 10:25:53,312 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:25:53,312 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [12313927] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:25:53,312 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:25:53,313 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-10-17 10:25:53,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134055826] [2022-10-17 10:25:53,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:25:53,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:25:53,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:25:53,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:25:53,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:25:53,318 INFO L87 Difference]: Start difference. First operand 903 states and 1104 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:25:53,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:25:53,417 INFO L93 Difference]: Finished difference Result 1237 states and 1508 transitions. [2022-10-17 10:25:53,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:25:53,418 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-10-17 10:25:53,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:25:53,419 INFO L225 Difference]: With dead ends: 1237 [2022-10-17 10:25:53,419 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:25:53,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-10-17 10:25:53,425 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 36 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:25:53,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 315 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:25:53,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:25:53,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:25:53,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:25:53,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:25:53,428 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 93 [2022-10-17 10:25:53,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:25:53,428 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:25:53,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-17 10:25:53,429 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:25:53,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:25:53,432 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:25:53,475 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-17 10:25:53,651 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:25:53,654 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:25:57,582 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 400 406) no Hoare annotation was computed. [2022-10-17 10:25:57,582 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 400 406) the Hoare annotation is: true [2022-10-17 10:25:57,582 INFO L899 garLoopResultBuilder]: For program point L192-1(lines 188 199) no Hoare annotation was computed. [2022-10-17 10:25:57,583 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 188 199) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (<= 1 ~pumpRunning~0))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:25:57,583 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 188 199) no Hoare annotation was computed. [2022-10-17 10:25:57,583 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 200 208) the Hoare annotation is: true [2022-10-17 10:25:57,583 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 200 208) no Hoare annotation was computed. [2022-10-17 10:25:57,583 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 200 208) no Hoare annotation was computed. [2022-10-17 10:25:57,584 INFO L895 garLoopResultBuilder]: At program point L448(line 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:25:57,584 INFO L899 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2022-10-17 10:25:57,584 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 172) no Hoare annotation was computed. [2022-10-17 10:25:57,584 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 376 399) no Hoare annotation was computed. [2022-10-17 10:25:57,584 INFO L895 garLoopResultBuilder]: At program point L168-2(lines 164 175) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse3) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,585 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:25:57,585 INFO L895 garLoopResultBuilder]: At program point L453-1(lines 434 458) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~methAndRunningLastTime~0 0))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse5) .cse0 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)))))) [2022-10-17 10:25:57,586 INFO L899 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-10-17 10:25:57,586 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 298) no Hoare annotation was computed. [2022-10-17 10:25:57,586 INFO L899 garLoopResultBuilder]: For program point L284(lines 284 301) no Hoare annotation was computed. [2022-10-17 10:25:57,586 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 276 304) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5))) (or .cse0 .cse1 .cse4 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse6 .cse7 .cse9) (or .cse2 .cse10 .cse7 .cse9 .cse8) (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 .cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse2 .cse10 .cse8))) [2022-10-17 10:25:57,587 INFO L895 garLoopResultBuilder]: At program point L565(lines 550 568) the Hoare annotation is: (let ((.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2))) [2022-10-17 10:25:57,587 INFO L895 garLoopResultBuilder]: At program point L941(lines 936 943) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:25:57,587 INFO L895 garLoopResultBuilder]: At program point L491(lines 486 494) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse4) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse5 .cse6 .cse0 (and (<= 1 ~pumpRunning~0) .cse7 (<= 2 ~waterLevel~0) .cse8) .cse9 (and .cse2 .cse3 .cse8))) (or .cse0 .cse1 .cse10 .cse4) (or .cse5 .cse6 .cse7 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse5 .cse6 .cse0 .cse9 .cse10))) [2022-10-17 10:25:57,588 INFO L895 garLoopResultBuilder]: At program point L260(lines 255 263) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,588 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-10-17 10:25:57,588 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 379 398) no Hoare annotation was computed. [2022-10-17 10:25:57,588 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 450) no Hoare annotation was computed. [2022-10-17 10:25:57,588 INFO L899 garLoopResultBuilder]: For program point L438(lines 438 455) no Hoare annotation was computed. [2022-10-17 10:25:57,589 INFO L895 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~methAndRunningLastTime~0 0))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse5) .cse0 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)))))) [2022-10-17 10:25:57,589 INFO L899 garLoopResultBuilder]: For program point L282-1(line 282) no Hoare annotation was computed. [2022-10-17 10:25:57,589 INFO L895 garLoopResultBuilder]: At program point L472(lines 467 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-10-17 10:25:57,590 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 376 399) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2 .cse3) (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse5) (or .cse0 .cse2 .cse1 .cse4 .cse5))) [2022-10-17 10:25:57,590 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 563) no Hoare annotation was computed. [2022-10-17 10:25:57,590 INFO L899 garLoopResultBuilder]: For program point L559-2(lines 559 563) no Hoare annotation was computed. [2022-10-17 10:25:57,590 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 376 399) no Hoare annotation was computed. [2022-10-17 10:25:57,590 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-10-17 10:25:57,590 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-10-17 10:25:57,591 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-10-17 10:25:57,591 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-10-17 10:25:57,591 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-10-17 10:25:57,591 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-10-17 10:25:57,591 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-10-17 10:25:57,591 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-10-17 10:25:57,591 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-10-17 10:25:57,592 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-10-17 10:25:57,592 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-10-17 10:25:57,592 INFO L895 garLoopResultBuilder]: At program point L960(lines 956 962) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:25:57,592 INFO L902 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2022-10-17 10:25:57,592 INFO L902 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2022-10-17 10:25:57,592 INFO L895 garLoopResultBuilder]: At program point L362(lines 315 363) the Hoare annotation is: false [2022-10-17 10:25:57,593 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:25:57,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:25:57,593 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 361) no Hoare annotation was computed. [2022-10-17 10:25:57,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:25:57,593 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 357) no Hoare annotation was computed. [2022-10-17 10:25:57,593 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,594 INFO L895 garLoopResultBuilder]: At program point L359(lines 316 361) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,594 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-10-17 10:25:57,594 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-10-17 10:25:57,594 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:25:57,594 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-10-17 10:25:57,595 INFO L895 garLoopResultBuilder]: At program point L273(lines 268 275) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:25:57,595 INFO L895 garLoopResultBuilder]: At program point L975(lines 970 978) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:25:57,595 INFO L895 garLoopResultBuilder]: At program point L967(lines 963 969) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:25:57,595 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 356) no Hoare annotation was computed. [2022-10-17 10:25:57,595 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 357) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,596 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:25:57,596 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-10-17 10:25:57,596 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-10-17 10:25:57,596 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-10-17 10:25:57,596 INFO L902 garLoopResultBuilder]: At program point L365(lines 306 369) the Hoare annotation is: true [2022-10-17 10:25:57,596 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-10-17 10:25:57,597 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-10-17 10:25:57,597 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 408 432) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:25:57,597 INFO L895 garLoopResultBuilder]: At program point L250(lines 241 254) the Hoare annotation is: (let ((.cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) (and .cse3 (<= 2 ~waterLevel~0)) (and .cse4 .cse3)) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse3 .cse1 .cse2 .cse5))) [2022-10-17 10:25:57,597 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse4)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse4 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)))))) [2022-10-17 10:25:57,598 INFO L895 garLoopResultBuilder]: At program point L546(lines 531 549) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse4)))) [2022-10-17 10:25:57,598 INFO L899 garLoopResultBuilder]: For program point L416(lines 416 424) no Hoare annotation was computed. [2022-10-17 10:25:57,598 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 429) no Hoare annotation was computed. [2022-10-17 10:25:57,598 INFO L899 garLoopResultBuilder]: For program point L540(lines 540 544) no Hoare annotation was computed. [2022-10-17 10:25:57,598 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 408 432) no Hoare annotation was computed. [2022-10-17 10:25:57,599 INFO L899 garLoopResultBuilder]: For program point L540-2(lines 540 544) no Hoare annotation was computed. [2022-10-17 10:25:57,599 INFO L899 garLoopResultBuilder]: For program point L245(lines 245 251) no Hoare annotation was computed. [2022-10-17 10:25:57,599 INFO L895 garLoopResultBuilder]: At program point L464(lines 459 466) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:25:57,599 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:25:57,599 INFO L899 garLoopResultBuilder]: For program point L427-1(lines 408 432) no Hoare annotation was computed. [2022-10-17 10:25:57,599 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 176 187) no Hoare annotation was computed. [2022-10-17 10:25:57,600 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 176 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-10-17 10:25:57,600 INFO L899 garLoopResultBuilder]: For program point L180-1(lines 176 187) no Hoare annotation was computed. [2022-10-17 10:25:57,603 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:25:57,605 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:25:57,637 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:25:57 BoogieIcfgContainer [2022-10-17 10:25:57,637 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:25:57,638 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:25:57,638 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:25:57,638 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:25:57,639 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:25:45" (3/4) ... [2022-10-17 10:25:57,642 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:25:57,648 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:25:57,648 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:25:57,648 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:25:57,648 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:25:57,648 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:25:57,649 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:25:57,649 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:25:57,658 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-10-17 10:25:57,659 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:25:57,660 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:25:57,660 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:25:57,661 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:25:57,661 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:25:57,662 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:25:57,685 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:25:57,685 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:25:57,685 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:25:57,686 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || (((((1 <= pumpRunning && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-10-17 10:25:57,686 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-10-17 10:25:57,687 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) [2022-10-17 10:25:57,688 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || !(2 <= \old(waterLevel)))) && ((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-10-17 10:25:57,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-10-17 10:25:57,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-10-17 10:25:57,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:25:57,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-10-17 10:25:57,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-10-17 10:25:57,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-10-17 10:25:57,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-10-17 10:25:57,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-10-17 10:25:57,721 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:25:57,722 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:25:57,723 INFO L158 Benchmark]: Toolchain (without parser) took 14369.06ms. Allocated memory was 83.9MB in the beginning and 180.4MB in the end (delta: 96.5MB). Free memory was 50.2MB in the beginning and 141.3MB in the end (delta: -91.1MB). Peak memory consumption was 4.8MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,723 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 83.9MB. Free memory was 64.2MB in the beginning and 64.2MB in the end (delta: 23.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:25:57,724 INFO L158 Benchmark]: CACSL2BoogieTranslator took 788.39ms. Allocated memory was 83.9MB in the beginning and 100.7MB in the end (delta: 16.8MB). Free memory was 50.0MB in the beginning and 67.4MB in the end (delta: -17.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,724 INFO L158 Benchmark]: Boogie Procedure Inliner took 75.70ms. Allocated memory is still 100.7MB. Free memory was 67.4MB in the beginning and 64.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,725 INFO L158 Benchmark]: Boogie Preprocessor took 50.23ms. Allocated memory is still 100.7MB. Free memory was 64.9MB in the beginning and 63.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,725 INFO L158 Benchmark]: RCFGBuilder took 746.01ms. Allocated memory is still 100.7MB. Free memory was 63.2MB in the beginning and 75.0MB in the end (delta: -11.8MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,726 INFO L158 Benchmark]: TraceAbstraction took 12615.72ms. Allocated memory was 100.7MB in the beginning and 180.4MB in the end (delta: 79.7MB). Free memory was 74.3MB in the beginning and 146.5MB in the end (delta: -72.2MB). Peak memory consumption was 107.7MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,726 INFO L158 Benchmark]: Witness Printer took 84.13ms. Allocated memory is still 180.4MB. Free memory was 146.5MB in the beginning and 141.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-10-17 10:25:57,729 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 83.9MB. Free memory was 64.2MB in the beginning and 64.2MB in the end (delta: 23.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 788.39ms. Allocated memory was 83.9MB in the beginning and 100.7MB in the end (delta: 16.8MB). Free memory was 50.0MB in the beginning and 67.4MB in the end (delta: -17.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 75.70ms. Allocated memory is still 100.7MB. Free memory was 67.4MB in the beginning and 64.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.23ms. Allocated memory is still 100.7MB. Free memory was 64.9MB in the beginning and 63.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 746.01ms. Allocated memory is still 100.7MB. Free memory was 63.2MB in the beginning and 75.0MB in the end (delta: -11.8MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. * TraceAbstraction took 12615.72ms. Allocated memory was 100.7MB in the beginning and 180.4MB in the end (delta: 79.7MB). Free memory was 74.3MB in the beginning and 146.5MB in the end (delta: -72.2MB). Peak memory consumption was 107.7MB. Max. memory is 16.1GB. * Witness Printer took 84.13ms. Allocated memory is still 180.4MB. Free memory was 146.5MB in the beginning and 141.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.5s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1654 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1626 mSDsluCounter, 3565 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2193 mSDsCounter, 416 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1271 IncrementalHoareTripleChecker+Invalid, 1687 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 416 mSolverCounterUnsat, 1372 mSDtfsCounter, 1271 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 493 GetRequests, 387 SyntacticMatches, 3 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 135 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=903occurred in iteration=12, InterpolantAutomatonStates: 92, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 431 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 1597 PreInvPairs, 1740 NumberOfFragments, 1567 HoareAnnotationTreeSize, 1597 FomulaSimplifications, 117 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 40 FomulaSimplificationsInter, 10087 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 953 NumberOfCodeBlocks, 953 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 937 ConstructedInterpolants, 0 QuantifiedInterpolants, 1631 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1403 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 13 PerfectInterpolantSequences, 170/178 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || !(2 <= \old(waterLevel)))) && ((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || (((((1 <= pumpRunning && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 268]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-10-17 10:25:57,802 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_73009297-dedb-457d-b177-1aa1e61c13b4/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE