./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:51:58,804 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:51:58,807 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:51:58,867 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:51:58,868 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:51:58,870 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:51:58,872 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:51:58,891 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:51:58,895 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:51:58,896 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:51:58,898 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:51:58,902 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:51:58,904 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:51:58,909 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:51:58,911 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:51:58,914 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:51:58,917 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:51:58,924 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:51:58,926 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:51:58,931 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:51:58,938 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:51:58,940 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:51:58,942 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:51:58,946 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:51:58,955 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:51:58,962 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:51:58,963 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:51:58,964 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:51:58,966 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:51:58,968 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:51:58,968 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:51:58,970 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:51:58,972 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:51:58,974 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:51:58,976 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:51:58,977 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:51:58,978 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:51:58,979 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:51:58,979 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:51:58,980 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:51:58,981 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:51:58,983 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:51:59,036 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:51:59,038 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:51:59,039 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:51:59,039 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:51:59,040 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:51:59,040 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:51:59,041 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:51:59,041 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:51:59,042 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:51:59,042 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:51:59,043 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:51:59,043 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:51:59,044 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:51:59,044 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:51:59,044 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:51:59,045 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:51:59,045 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:51:59,045 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:51:59,045 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:51:59,046 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:51:59,046 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:51:59,046 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:51:59,046 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:51:59,047 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:51:59,047 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:51:59,047 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:51:59,047 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:51:59,048 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:51:59,048 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:51:59,048 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:51:59,048 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:51:59,049 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:51:59,049 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:51:59,049 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2022-10-17 10:51:59,342 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:51:59,368 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:51:59,371 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:51:59,373 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:51:59,374 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:51:59,375 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-10-17 10:51:59,460 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/data/68d121252/afe7408aaccb4cddb0c2ba2db8ccf4e7/FLAGef88a5fa9 [2022-10-17 10:52:00,082 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:52:00,083 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-10-17 10:52:00,116 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/data/68d121252/afe7408aaccb4cddb0c2ba2db8ccf4e7/FLAGef88a5fa9 [2022-10-17 10:52:00,375 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/data/68d121252/afe7408aaccb4cddb0c2ba2db8ccf4e7 [2022-10-17 10:52:00,379 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:52:00,382 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:52:00,387 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:52:00,387 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:52:00,393 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:52:00,394 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:00,396 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@9981afd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00, skipping insertion in model container [2022-10-17 10:52:00,396 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:00,405 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:52:00,486 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:52:00,789 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-10-17 10:52:00,793 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:52:00,804 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:52:00,945 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-10-17 10:52:00,945 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:52:00,988 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:52:00,989 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00 WrapperNode [2022-10-17 10:52:00,989 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:52:00,991 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:52:00,991 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:52:00,992 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:52:01,001 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,064 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,135 INFO L138 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 265 [2022-10-17 10:52:01,135 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:52:01,136 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:52:01,136 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:52:01,136 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:52:01,144 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,144 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,148 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,149 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,156 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,182 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,193 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,195 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,202 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:52:01,203 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:52:01,203 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:52:01,203 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:52:01,204 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (1/1) ... [2022-10-17 10:52:01,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:52:01,225 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:52:01,237 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:52:01,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:52:01,304 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:52:01,304 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:52:01,305 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:52:01,305 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:52:01,305 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:52:01,305 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:52:01,306 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:52:01,306 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:52:01,306 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:52:01,306 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:52:01,306 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:52:01,307 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:52:01,307 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:52:01,307 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-10-17 10:52:01,307 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-10-17 10:52:01,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:52:01,308 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:52:01,308 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:52:01,308 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:52:01,308 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:52:01,400 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:52:01,403 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:52:01,966 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:52:01,975 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:52:01,976 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:52:01,978 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:52:01 BoogieIcfgContainer [2022-10-17 10:52:01,979 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:52:01,982 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:52:01,982 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:52:01,986 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:52:01,987 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:52:00" (1/3) ... [2022-10-17 10:52:01,987 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f46a8d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:52:01, skipping insertion in model container [2022-10-17 10:52:01,988 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:52:00" (2/3) ... [2022-10-17 10:52:01,988 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f46a8d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:52:01, skipping insertion in model container [2022-10-17 10:52:01,989 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:52:01" (3/3) ... [2022-10-17 10:52:01,990 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2022-10-17 10:52:02,013 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:52:02,013 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:52:02,081 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:52:02,090 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@424f140b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:52:02,090 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:52:02,096 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-10-17 10:52:02,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:52:02,109 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:02,110 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:02,110 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:02,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:02,117 INFO L85 PathProgramCache]: Analyzing trace with hash -656399671, now seen corresponding path program 1 times [2022-10-17 10:52:02,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:02,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2067984685] [2022-10-17 10:52:02,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:02,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:02,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:02,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:52:02,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:02,392 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:02,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:02,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2067984685] [2022-10-17 10:52:02,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2067984685] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:02,395 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:02,395 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:52:02,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [468940703] [2022-10-17 10:52:02,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:02,407 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:52:02,410 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:02,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:52:02,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:52:02,459 INFO L87 Difference]: Start difference. First operand has 96 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:02,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:02,547 INFO L93 Difference]: Finished difference Result 183 states and 248 transitions. [2022-10-17 10:52:02,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:52:02,550 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:52:02,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:02,565 INFO L225 Difference]: With dead ends: 183 [2022-10-17 10:52:02,566 INFO L226 Difference]: Without dead ends: 87 [2022-10-17 10:52:02,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:52:02,577 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:02,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:52:02,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-10-17 10:52:02,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-10-17 10:52:02,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-10-17 10:52:02,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-10-17 10:52:02,654 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2022-10-17 10:52:02,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:02,655 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-10-17 10:52:02,655 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:02,656 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-10-17 10:52:02,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:52:02,659 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:02,659 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:02,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:52:02,660 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:02,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:02,662 INFO L85 PathProgramCache]: Analyzing trace with hash -1991216904, now seen corresponding path program 1 times [2022-10-17 10:52:02,662 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:02,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469575141] [2022-10-17 10:52:02,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:02,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:02,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:02,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:52:02,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:02,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:02,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:02,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469575141] [2022-10-17 10:52:02,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469575141] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:02,859 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:02,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:52:02,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644386080] [2022-10-17 10:52:02,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:02,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:52:02,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:02,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:52:02,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:52:02,863 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:02,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:02,886 INFO L93 Difference]: Finished difference Result 134 states and 172 transitions. [2022-10-17 10:52:02,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:52:02,887 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:52:02,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:02,889 INFO L225 Difference]: With dead ends: 134 [2022-10-17 10:52:02,890 INFO L226 Difference]: Without dead ends: 78 [2022-10-17 10:52:02,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:52:02,893 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 17 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:02,894 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:52:02,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-10-17 10:52:02,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-10-17 10:52:02,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-10-17 10:52:02,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-10-17 10:52:02,913 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2022-10-17 10:52:02,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:02,914 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-10-17 10:52:02,915 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:02,915 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-10-17 10:52:02,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-10-17 10:52:02,919 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:02,920 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:02,920 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:52:02,920 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:02,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:02,922 INFO L85 PathProgramCache]: Analyzing trace with hash -1985117727, now seen corresponding path program 1 times [2022-10-17 10:52:02,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:02,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856940267] [2022-10-17 10:52:02,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:02,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:02,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:03,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:03,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:03,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [856940267] [2022-10-17 10:52:03,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [856940267] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:03,291 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:03,292 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:52:03,293 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31854533] [2022-10-17 10:52:03,293 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:03,293 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:03,294 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:03,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:03,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:03,296 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:03,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:03,477 INFO L93 Difference]: Finished difference Result 191 states and 249 transitions. [2022-10-17 10:52:03,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:52:03,479 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-10-17 10:52:03,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:03,485 INFO L225 Difference]: With dead ends: 191 [2022-10-17 10:52:03,485 INFO L226 Difference]: Without dead ends: 121 [2022-10-17 10:52:03,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:52:03,493 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 165 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:03,496 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 342 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:52:03,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-10-17 10:52:03,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 118. [2022-10-17 10:52:03,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-10-17 10:52:03,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 153 transitions. [2022-10-17 10:52:03,533 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 153 transitions. Word has length 31 [2022-10-17 10:52:03,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:03,534 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 153 transitions. [2022-10-17 10:52:03,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:03,535 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 153 transitions. [2022-10-17 10:52:03,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-10-17 10:52:03,537 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:03,537 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:03,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:52:03,538 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:03,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:03,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1980394589, now seen corresponding path program 1 times [2022-10-17 10:52:03,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:03,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [134925238] [2022-10-17 10:52:03,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:03,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:03,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:52:03,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,679 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:03,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:03,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [134925238] [2022-10-17 10:52:03,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [134925238] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:03,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:03,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:52:03,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653660201] [2022-10-17 10:52:03,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:03,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:03,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:03,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:03,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:03,684 INFO L87 Difference]: Start difference. First operand 118 states and 153 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:03,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:03,804 INFO L93 Difference]: Finished difference Result 272 states and 364 transitions. [2022-10-17 10:52:03,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:52:03,805 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-10-17 10:52:03,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:03,809 INFO L225 Difference]: With dead ends: 272 [2022-10-17 10:52:03,809 INFO L226 Difference]: Without dead ends: 162 [2022-10-17 10:52:03,811 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:52:03,824 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 78 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:03,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 381 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:52:03,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-10-17 10:52:03,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 152. [2022-10-17 10:52:03,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-10-17 10:52:03,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 192 transitions. [2022-10-17 10:52:03,863 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 192 transitions. Word has length 34 [2022-10-17 10:52:03,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:03,864 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 192 transitions. [2022-10-17 10:52:03,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:52:03,865 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 192 transitions. [2022-10-17 10:52:03,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-10-17 10:52:03,874 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:03,874 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:03,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:52:03,875 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:03,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:03,876 INFO L85 PathProgramCache]: Analyzing trace with hash 501495073, now seen corresponding path program 1 times [2022-10-17 10:52:03,876 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:03,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1024310064] [2022-10-17 10:52:03,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:03,877 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:03,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:52:03,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:03,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-17 10:52:04,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,012 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:04,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:04,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1024310064] [2022-10-17 10:52:04,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1024310064] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:04,018 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:04,019 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-17 10:52:04,019 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579468006] [2022-10-17 10:52:04,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:04,020 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-17 10:52:04,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:04,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-17 10:52:04,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-17 10:52:04,028 INFO L87 Difference]: Start difference. First operand 152 states and 192 transitions. Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:52:04,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:04,214 INFO L93 Difference]: Finished difference Result 323 states and 408 transitions. [2022-10-17 10:52:04,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:52:04,215 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 48 [2022-10-17 10:52:04,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:04,223 INFO L225 Difference]: With dead ends: 323 [2022-10-17 10:52:04,224 INFO L226 Difference]: Without dead ends: 179 [2022-10-17 10:52:04,225 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:04,231 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 92 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:04,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 265 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:52:04,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2022-10-17 10:52:04,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 175. [2022-10-17 10:52:04,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 144 states have internal predecessors, (171), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-10-17 10:52:04,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 218 transitions. [2022-10-17 10:52:04,284 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 218 transitions. Word has length 48 [2022-10-17 10:52:04,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:04,287 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 218 transitions. [2022-10-17 10:52:04,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:52:04,287 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 218 transitions. [2022-10-17 10:52:04,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:52:04,289 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:04,289 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:04,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:52:04,289 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:04,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:04,291 INFO L85 PathProgramCache]: Analyzing trace with hash -316583003, now seen corresponding path program 1 times [2022-10-17 10:52:04,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:04,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636864485] [2022-10-17 10:52:04,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:04,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:04,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:04,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:52:04,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:04,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:04,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636864485] [2022-10-17 10:52:04,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636864485] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:04,484 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:04,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:52:04,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894558839] [2022-10-17 10:52:04,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:04,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:52:04,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:04,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:52:04,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:52:04,488 INFO L87 Difference]: Start difference. First operand 175 states and 218 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:04,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:04,691 INFO L93 Difference]: Finished difference Result 350 states and 442 transitions. [2022-10-17 10:52:04,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:52:04,692 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:52:04,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:04,695 INFO L225 Difference]: With dead ends: 350 [2022-10-17 10:52:04,695 INFO L226 Difference]: Without dead ends: 183 [2022-10-17 10:52:04,697 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:52:04,698 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 63 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:04,699 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 375 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:52:04,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-10-17 10:52:04,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 178. [2022-10-17 10:52:04,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-10-17 10:52:04,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 221 transitions. [2022-10-17 10:52:04,738 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 221 transitions. Word has length 45 [2022-10-17 10:52:04,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:04,739 INFO L495 AbstractCegarLoop]: Abstraction has 178 states and 221 transitions. [2022-10-17 10:52:04,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:04,740 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 221 transitions. [2022-10-17 10:52:04,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:52:04,741 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:04,741 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:04,742 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:52:04,742 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:04,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:04,743 INFO L85 PathProgramCache]: Analyzing trace with hash -2005526745, now seen corresponding path program 1 times [2022-10-17 10:52:04,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:04,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714305366] [2022-10-17 10:52:04,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:04,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:04,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:04,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:52:04,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:04,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:04,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:04,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714305366] [2022-10-17 10:52:04,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714305366] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:04,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:04,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:52:04,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828383546] [2022-10-17 10:52:04,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:04,902 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:04,902 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:04,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:04,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:04,903 INFO L87 Difference]: Start difference. First operand 178 states and 221 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:05,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:05,056 INFO L93 Difference]: Finished difference Result 358 states and 454 transitions. [2022-10-17 10:52:05,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:52:05,057 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:52:05,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:05,061 INFO L225 Difference]: With dead ends: 358 [2022-10-17 10:52:05,061 INFO L226 Difference]: Without dead ends: 188 [2022-10-17 10:52:05,063 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:52:05,064 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 67 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:05,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 295 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:52:05,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-10-17 10:52:05,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 180. [2022-10-17 10:52:05,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-10-17 10:52:05,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 223 transitions. [2022-10-17 10:52:05,089 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 223 transitions. Word has length 45 [2022-10-17 10:52:05,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:05,089 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 223 transitions. [2022-10-17 10:52:05,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:05,090 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 223 transitions. [2022-10-17 10:52:05,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:52:05,091 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:05,091 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:05,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:52:05,092 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:05,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:05,093 INFO L85 PathProgramCache]: Analyzing trace with hash -1582824919, now seen corresponding path program 1 times [2022-10-17 10:52:05,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:05,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1364342724] [2022-10-17 10:52:05,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:05,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:05,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:05,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:52:05,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:05,202 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:05,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1364342724] [2022-10-17 10:52:05,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1364342724] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:05,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:05,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:52:05,203 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1195376643] [2022-10-17 10:52:05,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:05,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:05,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:05,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:05,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:05,205 INFO L87 Difference]: Start difference. First operand 180 states and 223 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:05,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:05,493 INFO L93 Difference]: Finished difference Result 545 states and 699 transitions. [2022-10-17 10:52:05,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:52:05,494 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:52:05,496 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:05,501 INFO L225 Difference]: With dead ends: 545 [2022-10-17 10:52:05,501 INFO L226 Difference]: Without dead ends: 373 [2022-10-17 10:52:05,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:52:05,503 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 213 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 331 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:05,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [219 Valid, 331 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:52:05,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2022-10-17 10:52:05,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 371. [2022-10-17 10:52:05,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) [2022-10-17 10:52:05,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 460 transitions. [2022-10-17 10:52:05,571 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 460 transitions. Word has length 45 [2022-10-17 10:52:05,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:05,571 INFO L495 AbstractCegarLoop]: Abstraction has 371 states and 460 transitions. [2022-10-17 10:52:05,572 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:52:05,572 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 460 transitions. [2022-10-17 10:52:05,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-10-17 10:52:05,574 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:05,574 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:05,575 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:52:05,575 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:05,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:05,576 INFO L85 PathProgramCache]: Analyzing trace with hash 929828559, now seen corresponding path program 1 times [2022-10-17 10:52:05,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:05,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1169829200] [2022-10-17 10:52:05,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:05,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:05,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:52:05,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:52:05,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-10-17 10:52:05,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:05,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:05,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:05,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1169829200] [2022-10-17 10:52:05,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1169829200] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:05,690 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:52:05,690 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:52:05,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [564252326] [2022-10-17 10:52:05,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:05,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:05,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:05,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:05,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:52:05,693 INFO L87 Difference]: Start difference. First operand 371 states and 460 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:52:06,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:06,111 INFO L93 Difference]: Finished difference Result 690 states and 898 transitions. [2022-10-17 10:52:06,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:52:06,112 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2022-10-17 10:52:06,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:06,121 INFO L225 Difference]: With dead ends: 690 [2022-10-17 10:52:06,122 INFO L226 Difference]: Without dead ends: 688 [2022-10-17 10:52:06,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:52:06,125 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 294 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 263 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:06,126 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 263 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:52:06,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 688 states. [2022-10-17 10:52:06,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 688 to 584. [2022-10-17 10:52:06,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) [2022-10-17 10:52:06,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 769 transitions. [2022-10-17 10:52:06,241 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 769 transitions. Word has length 49 [2022-10-17 10:52:06,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:06,242 INFO L495 AbstractCegarLoop]: Abstraction has 584 states and 769 transitions. [2022-10-17 10:52:06,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-10-17 10:52:06,242 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 769 transitions. [2022-10-17 10:52:06,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-10-17 10:52:06,246 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:06,247 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:06,247 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:52:06,247 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:06,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:06,248 INFO L85 PathProgramCache]: Analyzing trace with hash 1198485224, now seen corresponding path program 1 times [2022-10-17 10:52:06,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:06,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [592067815] [2022-10-17 10:52:06,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:06,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:06,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:52:06,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:06,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:52:06,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:52:06,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-17 10:52:06,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-10-17 10:52:06,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,497 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-17 10:52:06,497 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:06,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [592067815] [2022-10-17 10:52:06,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [592067815] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:52:06,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2134512361] [2022-10-17 10:52:06,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:06,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:52:06,499 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:52:06,501 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:52:06,537 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:52:06,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:06,664 INFO L263 TraceCheckSpWp]: Trace formula consists of 462 conjuncts, 4 conjunts are in the unsatisfiable core [2022-10-17 10:52:06,675 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:52:06,829 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:06,829 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:52:06,830 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2134512361] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:06,830 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:52:06,830 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-10-17 10:52:06,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1728825628] [2022-10-17 10:52:06,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:06,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:52:06,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:06,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:52:06,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:52:06,835 INFO L87 Difference]: Start difference. First operand 584 states and 769 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-10-17 10:52:06,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:06,925 INFO L93 Difference]: Finished difference Result 993 states and 1335 transitions. [2022-10-17 10:52:06,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:52:06,925 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-10-17 10:52:06,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:06,931 INFO L225 Difference]: With dead ends: 993 [2022-10-17 10:52:06,932 INFO L226 Difference]: Without dead ends: 501 [2022-10-17 10:52:06,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:52:06,935 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 42 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:06,937 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 209 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:52:06,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2022-10-17 10:52:07,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 501. [2022-10-17 10:52:07,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-10-17 10:52:07,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 616 transitions. [2022-10-17 10:52:07,020 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 616 transitions. Word has length 88 [2022-10-17 10:52:07,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:07,021 INFO L495 AbstractCegarLoop]: Abstraction has 501 states and 616 transitions. [2022-10-17 10:52:07,022 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-10-17 10:52:07,022 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 616 transitions. [2022-10-17 10:52:07,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-10-17 10:52:07,024 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:07,024 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:07,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:52:07,238 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-10-17 10:52:07,239 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:07,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:07,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1221172747, now seen corresponding path program 1 times [2022-10-17 10:52:07,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:07,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423769791] [2022-10-17 10:52:07,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:07,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:07,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:52:07,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:07,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:52:07,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:52:07,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-17 10:52:07,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:52:07,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-10-17 10:52:07,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,606 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-17 10:52:07,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:07,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423769791] [2022-10-17 10:52:07,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423769791] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:52:07,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1250896056] [2022-10-17 10:52:07,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:07,608 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:52:07,608 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:52:07,617 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:52:07,633 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:52:07,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:07,743 INFO L263 TraceCheckSpWp]: Trace formula consists of 465 conjuncts, 5 conjunts are in the unsatisfiable core [2022-10-17 10:52:07,752 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:52:07,843 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-17 10:52:07,843 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:52:07,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1250896056] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:07,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:52:07,844 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-10-17 10:52:07,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398001912] [2022-10-17 10:52:07,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:07,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:52:07,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:07,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:52:07,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-10-17 10:52:07,848 INFO L87 Difference]: Start difference. First operand 501 states and 616 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-17 10:52:07,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:07,944 INFO L93 Difference]: Finished difference Result 944 states and 1188 transitions. [2022-10-17 10:52:07,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:52:07,945 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 91 [2022-10-17 10:52:07,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:07,950 INFO L225 Difference]: With dead ends: 944 [2022-10-17 10:52:07,950 INFO L226 Difference]: Without dead ends: 535 [2022-10-17 10:52:07,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:52:07,953 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 33 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:07,954 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 404 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:52:07,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-10-17 10:52:08,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 507. [2022-10-17 10:52:08,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-10-17 10:52:08,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 507 states to 507 states and 622 transitions. [2022-10-17 10:52:08,017 INFO L78 Accepts]: Start accepts. Automaton has 507 states and 622 transitions. Word has length 91 [2022-10-17 10:52:08,017 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:08,018 INFO L495 AbstractCegarLoop]: Abstraction has 507 states and 622 transitions. [2022-10-17 10:52:08,018 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-17 10:52:08,018 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 622 transitions. [2022-10-17 10:52:08,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-10-17 10:52:08,027 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:52:08,028 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:08,073 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:52:08,253 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:52:08,253 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:52:08,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:52:08,254 INFO L85 PathProgramCache]: Analyzing trace with hash 1355186253, now seen corresponding path program 1 times [2022-10-17 10:52:08,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:52:08,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161863980] [2022-10-17 10:52:08,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:08,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:52:08,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:52:08,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-17 10:52:08,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:52:08,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:52:08,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-17 10:52:08,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:52:08,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-10-17 10:52:08,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,482 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-10-17 10:52:08,482 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:52:08,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161863980] [2022-10-17 10:52:08,482 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161863980] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:52:08,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [778420672] [2022-10-17 10:52:08,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:52:08,483 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:52:08,483 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:52:08,485 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:52:08,509 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-17 10:52:08,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:52:08,611 INFO L263 TraceCheckSpWp]: Trace formula consists of 464 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-17 10:52:08,615 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:52:08,773 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:52:08,773 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:52:08,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [778420672] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:52:08,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:52:08,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-10-17 10:52:08,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [794494912] [2022-10-17 10:52:08,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:52:08,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:52:08,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:52:08,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:52:08,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2022-10-17 10:52:08,776 INFO L87 Difference]: Start difference. First operand 507 states and 622 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:52:08,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:52:08,949 INFO L93 Difference]: Finished difference Result 823 states and 1018 transitions. [2022-10-17 10:52:08,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-17 10:52:08,950 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 91 [2022-10-17 10:52:08,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:52:08,951 INFO L225 Difference]: With dead ends: 823 [2022-10-17 10:52:08,951 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:52:08,953 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 96 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-10-17 10:52:08,954 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 150 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 492 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:52:08,955 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 492 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:52:08,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:52:08,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:52:08,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:52:08,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:52:08,956 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 91 [2022-10-17 10:52:08,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:52:08,956 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:52:08,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-10-17 10:52:08,957 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:52:08,957 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:52:08,960 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:52:09,002 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-17 10:52:09,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-10-17 10:52:09,175 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:52:13,067 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 229 236) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-10-17 10:52:13,067 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2022-10-17 10:52:13,067 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 229 236) no Hoare annotation was computed. [2022-10-17 10:52:13,068 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2022-10-17 10:52:13,068 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2022-10-17 10:52:13,068 INFO L899 garLoopResultBuilder]: For program point L562-1(lines 558 569) no Hoare annotation was computed. [2022-10-17 10:52:13,068 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 558 569) the Hoare annotation is: true [2022-10-17 10:52:13,068 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2022-10-17 10:52:13,068 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 570 578) the Hoare annotation is: true [2022-10-17 10:52:13,068 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 570 578) no Hoare annotation was computed. [2022-10-17 10:52:13,069 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2022-10-17 10:52:13,069 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2022-10-17 10:52:13,069 INFO L902 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2022-10-17 10:52:13,069 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 356 385) the Hoare annotation is: true [2022-10-17 10:52:13,069 INFO L899 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2022-10-17 10:52:13,069 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-10-17 10:52:13,069 INFO L902 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2022-10-17 10:52:13,070 INFO L899 garLoopResultBuilder]: For program point L367(line 367) no Hoare annotation was computed. [2022-10-17 10:52:13,070 INFO L902 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2022-10-17 10:52:13,070 INFO L902 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2022-10-17 10:52:13,070 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-10-17 10:52:13,070 INFO L895 garLoopResultBuilder]: At program point L630(lines 625 633) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse2 .cse5) (or .cse0 .cse3 .cse1) (or .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2 .cse5))) [2022-10-17 10:52:13,071 INFO L895 garLoopResultBuilder]: At program point L1006(lines 1001 1008) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:52:13,071 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 138 161) no Hoare annotation was computed. [2022-10-17 10:52:13,071 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2022-10-17 10:52:13,071 INFO L899 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2022-10-17 10:52:13,071 INFO L899 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2022-10-17 10:52:13,071 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2022-10-17 10:52:13,072 INFO L895 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse5 (not .cse6))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse4 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse3) (and .cse1 .cse2 .cse3 .cse5) .cse6) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) .cse5) .cse6 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-10-17 10:52:13,072 INFO L895 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:52:13,072 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not .cse0)) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2))) [2022-10-17 10:52:13,072 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-10-17 10:52:13,073 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:52:13,073 INFO L895 garLoopResultBuilder]: At program point L215-1(lines 196 220) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and .cse2 .cse3) (and (<= 1 ~pumpRunning~0) .cse4 .cse3) .cse5)) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse6 .cse5) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) (not .cse6)) (or .cse0 (and .cse2 .cse4 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1))))) [2022-10-17 10:52:13,073 INFO L899 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2022-10-17 10:52:13,074 INFO L895 garLoopResultBuilder]: At program point L327(lines 312 330) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1))) [2022-10-17 10:52:13,074 INFO L895 garLoopResultBuilder]: At program point L253(lines 248 256) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse5 .cse6 .cse3)) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 .cse3) (< |old(~waterLevel~0)| 2) .cse4) (or (and .cse5 .cse2 .cse6 (= ~waterLevel~0 1)) .cse0 .cse1 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse4 (not .cse7)) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse5 .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse7 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-10-17 10:52:13,074 INFO L899 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2022-10-17 10:52:13,075 INFO L895 garLoopResultBuilder]: At program point L538-2(lines 534 545) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse1 .cse2) (or .cse3 .cse4 (not .cse1)) (or .cse5 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (or .cse3 .cse5 .cse4))) [2022-10-17 10:52:13,075 INFO L895 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse6 .cse4)) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3 .cse4) .cse5) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse5) (or .cse0 .cse1 .cse3 .cse8) (or .cse0 .cse1 .cse8 (and .cse6 (= ~waterLevel~0 1))) (or .cse0 .cse2 (not (<= 1 |old(~waterLevel~0)|)) (not .cse7))))) [2022-10-17 10:52:13,075 INFO L899 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2022-10-17 10:52:13,075 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 138 161) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse1)) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 .cse3) (or .cse4 .cse5 .cse6 (not (= |old(~waterLevel~0)| 1))) (or .cse5 .cse6 .cse0 .cse2 .cse3) (or .cse4 .cse5 .cse7 .cse8) (or .cse4 .cse5 .cse6 (< |old(~waterLevel~0)| 2) .cse2) (or .cse4 .cse7 .cse8 (not .cse2))))) [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-10-17 10:52:13,076 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2022-10-17 10:52:13,081 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,082 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:52:13,082 INFO L895 garLoopResultBuilder]: At program point L511(lines 507 513) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,082 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:52:13,082 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:52:13,083 INFO L902 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2022-10-17 10:52:13,083 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2022-10-17 10:52:13,083 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2022-10-17 10:52:13,083 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-10-17 10:52:13,083 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:52:13,084 INFO L895 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2 .cse3))) [2022-10-17 10:52:13,084 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2022-10-17 10:52:13,084 INFO L899 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2022-10-17 10:52:13,084 INFO L895 garLoopResultBuilder]: At program point L343(lines 331 345) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= 0 ~systemActive~0)) [2022-10-17 10:52:13,085 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2022-10-17 10:52:13,085 INFO L895 garLoopResultBuilder]: At program point L463(lines 458 465) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,085 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-10-17 10:52:13,085 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2022-10-17 10:52:13,086 INFO L902 garLoopResultBuilder]: At program point L426(lines 418 428) the Hoare annotation is: true [2022-10-17 10:52:13,086 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2022-10-17 10:52:13,086 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse3 (= 0 ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not .cse3)) (and .cse4 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse5 .cse2) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse3))) [2022-10-17 10:52:13,087 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2022-10-17 10:52:13,087 INFO L902 garLoopResultBuilder]: At program point L451(lines 432 454) the Hoare annotation is: true [2022-10-17 10:52:13,088 INFO L899 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2022-10-17 10:52:13,089 INFO L895 garLoopResultBuilder]: At program point L414(lines 410 416) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,091 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-10-17 10:52:13,091 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-10-17 10:52:13,091 INFO L895 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,092 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2022-10-17 10:52:13,092 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-10-17 10:52:13,093 INFO L895 garLoopResultBuilder]: At program point L518(lines 514 520) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-10-17 10:52:13,093 INFO L899 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2022-10-17 10:52:13,094 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 170 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2 .cse3))) [2022-10-17 10:52:13,094 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-10-17 10:52:13,094 INFO L895 garLoopResultBuilder]: At program point L308(lines 293 311) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-10-17 10:52:13,094 INFO L899 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2022-10-17 10:52:13,094 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2022-10-17 10:52:13,095 INFO L899 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2022-10-17 10:52:13,095 INFO L895 garLoopResultBuilder]: At program point L620(lines 611 624) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2022-10-17 10:52:13,095 INFO L899 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2022-10-17 10:52:13,096 INFO L895 garLoopResultBuilder]: At program point L226(lines 221 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-10-17 10:52:13,096 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-10-17 10:52:13,096 INFO L899 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2022-10-17 10:52:13,096 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2022-10-17 10:52:13,096 INFO L899 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2022-10-17 10:52:13,097 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2022-10-17 10:52:13,097 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 546 557) no Hoare annotation was computed. [2022-10-17 10:52:13,098 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 546 557) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse2) (or (not (<= 1 ~pumpRunning~0)) .cse1 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-10-17 10:52:13,103 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:52:13,108 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:52:13,164 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:52:13 BoogieIcfgContainer [2022-10-17 10:52:13,164 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:52:13,165 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:52:13,165 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:52:13,165 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:52:13,166 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:52:01" (3/4) ... [2022-10-17 10:52:13,169 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:52:13,177 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-10-17 10:52:13,177 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:52:13,177 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:52:13,177 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:52:13,177 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:52:13,178 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:52:13,178 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:52:13,178 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:52:13,189 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-10-17 10:52:13,190 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:52:13,191 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:52:13,192 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:52:13,193 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:52:13,194 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:52:13,194 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:52:13,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-10-17 10:52:13,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-10-17 10:52:13,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-10-17 10:52:13,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) [2022-10-17 10:52:13,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-10-17 10:52:13,226 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) [2022-10-17 10:52:13,227 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive)) [2022-10-17 10:52:13,227 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-10-17 10:52:13,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 0 == systemActive [2022-10-17 10:52:13,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || \old(waterLevel) < 2) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 <= \old(pumpRunning)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-10-17 10:52:13,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-10-17 10:52:13,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0) [2022-10-17 10:52:13,228 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-10-17 10:52:13,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-10-17 10:52:13,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-10-17 10:52:13,229 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-10-17 10:52:13,285 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:52:13,285 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:52:13,286 INFO L158 Benchmark]: Toolchain (without parser) took 12904.33ms. Allocated memory was 92.3MB in the beginning and 220.2MB in the end (delta: 127.9MB). Free memory was 59.5MB in the beginning and 99.9MB in the end (delta: -40.4MB). Peak memory consumption was 89.6MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,287 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory is still 58.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:52:13,287 INFO L158 Benchmark]: CACSL2BoogieTranslator took 602.85ms. Allocated memory is still 92.3MB. Free memory was 59.4MB in the beginning and 40.2MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,288 INFO L158 Benchmark]: Boogie Procedure Inliner took 144.35ms. Allocated memory was 92.3MB in the beginning and 130.0MB in the end (delta: 37.7MB). Free memory was 40.2MB in the beginning and 107.0MB in the end (delta: -66.8MB). Peak memory consumption was 3.9MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,288 INFO L158 Benchmark]: Boogie Preprocessor took 65.92ms. Allocated memory is still 130.0MB. Free memory was 107.0MB in the beginning and 104.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:52:13,289 INFO L158 Benchmark]: RCFGBuilder took 776.15ms. Allocated memory is still 130.0MB. Free memory was 104.9MB in the beginning and 86.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,290 INFO L158 Benchmark]: TraceAbstraction took 11182.46ms. Allocated memory was 130.0MB in the beginning and 220.2MB in the end (delta: 90.2MB). Free memory was 85.3MB in the beginning and 106.2MB in the end (delta: -20.9MB). Peak memory consumption was 108.3MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,292 INFO L158 Benchmark]: Witness Printer took 120.89ms. Allocated memory is still 220.2MB. Free memory was 106.2MB in the beginning and 99.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-10-17 10:52:13,295 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory is still 58.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 602.85ms. Allocated memory is still 92.3MB. Free memory was 59.4MB in the beginning and 40.2MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 144.35ms. Allocated memory was 92.3MB in the beginning and 130.0MB in the end (delta: 37.7MB). Free memory was 40.2MB in the beginning and 107.0MB in the end (delta: -66.8MB). Peak memory consumption was 3.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.92ms. Allocated memory is still 130.0MB. Free memory was 107.0MB in the beginning and 104.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 776.15ms. Allocated memory is still 130.0MB. Free memory was 104.9MB in the beginning and 86.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 11182.46ms. Allocated memory was 130.0MB in the beginning and 220.2MB in the end (delta: 90.2MB). Free memory was 85.3MB in the beginning and 106.2MB in the end (delta: -20.9MB). Peak memory consumption was 108.3MB. Max. memory is 16.1GB. * Witness Printer took 120.89ms. Allocated memory is still 220.2MB. Free memory was 106.2MB in the beginning and 99.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.0s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1239 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1214 mSDsluCounter, 3654 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2252 mSDsCounter, 289 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 669 IncrementalHoareTripleChecker+Invalid, 958 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 289 mSolverCounterUnsat, 1402 mSDtfsCounter, 669 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 429 GetRequests, 354 SyntacticMatches, 1 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=584occurred in iteration=9, InterpolantAutomatonStates: 64, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 164 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1157 PreInvPairs, 1297 NumberOfFragments, 1477 HoareAnnotationTreeSize, 1157 FomulaSimplifications, 474 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 44 FomulaSimplificationsInter, 8056 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 888 NumberOfCodeBlocks, 888 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 873 ConstructedInterpolants, 0 QuantifiedInterpolants, 1402 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1391 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 177/184 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || \old(waterLevel) < 2) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 <= \old(pumpRunning)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 0 == systemActive - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-10-17 10:52:13,375 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3590157-b648-4e12-a7d8-be16f3076b49/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE