./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:30:55,826 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:30:55,829 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:30:55,880 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:30:55,880 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:30:55,884 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:30:55,887 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:30:55,892 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:30:55,894 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:30:55,900 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:30:55,901 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:30:55,903 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:30:55,904 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:30:55,906 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:30:55,908 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:30:55,910 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:30:55,912 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:30:55,913 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:30:55,915 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:30:55,918 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:30:55,920 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:30:55,921 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:30:55,923 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:30:55,924 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:30:55,928 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:30:55,928 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:30:55,929 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:30:55,930 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:30:55,930 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:30:55,931 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:30:55,932 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:30:55,932 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:30:55,933 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:30:55,934 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:30:55,935 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:30:55,936 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:30:55,937 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:30:55,937 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:30:55,937 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:30:55,938 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:30:55,939 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:30:55,940 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:30:55,963 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:30:55,963 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:30:55,964 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:30:55,964 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:30:55,965 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:30:55,965 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:30:55,965 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:30:55,966 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:30:55,966 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:30:55,966 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:30:55,966 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:30:55,966 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:30:55,967 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:30:55,967 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:30:55,967 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:30:55,967 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:30:55,967 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:30:55,968 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:30:55,968 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:30:55,968 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:30:55,968 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:30:55,968 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:30:55,969 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:30:55,969 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:30:55,969 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:30:55,969 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:30:55,969 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:30:55,970 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:30:55,970 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:30:55,970 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:30:55,970 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:30:55,970 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:30:55,971 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:30:55,971 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 [2022-10-17 10:30:56,206 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:30:56,236 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:30:56,239 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:30:56,240 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:30:56,241 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:30:56,242 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-10-17 10:30:56,320 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/data/22f776e80/ea95a7b0087c42dbba1a787f475fb2d6/FLAGe214a52d0 [2022-10-17 10:30:56,866 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:30:56,866 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-10-17 10:30:56,888 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/data/22f776e80/ea95a7b0087c42dbba1a787f475fb2d6/FLAGe214a52d0 [2022-10-17 10:30:57,211 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/data/22f776e80/ea95a7b0087c42dbba1a787f475fb2d6 [2022-10-17 10:30:57,213 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:30:57,214 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:30:57,216 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:30:57,216 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:30:57,219 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:30:57,220 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,221 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@15737dcb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57, skipping insertion in model container [2022-10-17 10:30:57,222 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,228 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:30:57,301 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:30:57,592 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-10-17 10:30:57,595 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:30:57,603 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:30:57,675 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-10-17 10:30:57,676 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:30:57,697 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:30:57,699 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57 WrapperNode [2022-10-17 10:30:57,699 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:30:57,700 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:30:57,701 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:30:57,701 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:30:57,708 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,737 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,795 INFO L138 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 276 [2022-10-17 10:30:57,796 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:30:57,797 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:30:57,797 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:30:57,797 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:30:57,806 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,806 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,815 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,816 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,831 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,846 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,848 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,849 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,858 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:30:57,859 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:30:57,859 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:30:57,859 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:30:57,860 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (1/1) ... [2022-10-17 10:30:57,867 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:30:57,880 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:30:57,893 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:30:57,919 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:30:57,941 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:30:57,941 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:30:57,942 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:30:57,942 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:30:57,942 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:30:57,942 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:30:57,942 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:30:57,943 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:30:57,943 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:30:57,943 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:30:57,943 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:30:57,943 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:30:57,944 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:30:57,944 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:30:57,944 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:30:57,944 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:30:57,944 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:30:57,945 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:30:58,064 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:30:58,076 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:30:58,511 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:30:58,518 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:30:58,518 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:30:58,520 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:30:58 BoogieIcfgContainer [2022-10-17 10:30:58,521 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:30:58,523 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:30:58,523 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:30:58,530 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:30:58,530 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:30:57" (1/3) ... [2022-10-17 10:30:58,531 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30814458 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:30:58, skipping insertion in model container [2022-10-17 10:30:58,531 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:30:57" (2/3) ... [2022-10-17 10:30:58,532 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30814458 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:30:58, skipping insertion in model container [2022-10-17 10:30:58,532 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:30:58" (3/3) ... [2022-10-17 10:30:58,533 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product57.cil.c [2022-10-17 10:30:58,552 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:30:58,552 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:30:58,621 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:30:58,628 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3e4ce0f1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:30:58,628 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:30:58,632 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-10-17 10:30:58,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:30:58,643 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:30:58,643 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:30:58,644 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:30:58,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:30:58,649 INFO L85 PathProgramCache]: Analyzing trace with hash 1702094398, now seen corresponding path program 1 times [2022-10-17 10:30:58,663 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:30:58,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64356299] [2022-10-17 10:30:58,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:30:58,664 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:30:58,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:58,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:30:58,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:58,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:30:58,911 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:30:58,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64356299] [2022-10-17 10:30:58,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64356299] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:30:58,912 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:30:58,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:30:58,914 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308959937] [2022-10-17 10:30:58,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:30:58,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:30:58,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:30:58,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:30:58,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:30:58,969 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:30:59,016 INFO L93 Difference]: Finished difference Result 177 states and 242 transitions. [2022-10-17 10:30:59,016 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:30:59,018 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:30:59,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:30:59,029 INFO L225 Difference]: With dead ends: 177 [2022-10-17 10:30:59,029 INFO L226 Difference]: Without dead ends: 84 [2022-10-17 10:30:59,033 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:30:59,037 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:30:59,038 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:30:59,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-10-17 10:30:59,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-10-17 10:30:59,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:30:59,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-10-17 10:30:59,089 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2022-10-17 10:30:59,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:30:59,090 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-10-17 10:30:59,090 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,090 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-10-17 10:30:59,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:30:59,093 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:30:59,093 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:30:59,094 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:30:59,094 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:30:59,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:30:59,095 INFO L85 PathProgramCache]: Analyzing trace with hash 2038444326, now seen corresponding path program 1 times [2022-10-17 10:30:59,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:30:59,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [649587579] [2022-10-17 10:30:59,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:30:59,096 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:30:59,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-17 10:30:59,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,314 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:30:59,318 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:30:59,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [649587579] [2022-10-17 10:30:59,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [649587579] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:30:59,319 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:30:59,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:30:59,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1734354470] [2022-10-17 10:30:59,320 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:30:59,321 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:30:59,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:30:59,323 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:30:59,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:30:59,324 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:30:59,346 INFO L93 Difference]: Finished difference Result 133 states and 173 transitions. [2022-10-17 10:30:59,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:30:59,348 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:30:59,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:30:59,350 INFO L225 Difference]: With dead ends: 133 [2022-10-17 10:30:59,350 INFO L226 Difference]: Without dead ends: 75 [2022-10-17 10:30:59,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:30:59,353 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:30:59,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:30:59,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-10-17 10:30:59,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-10-17 10:30:59,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:30:59,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2022-10-17 10:30:59,367 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2022-10-17 10:30:59,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:30:59,367 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2022-10-17 10:30:59,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,368 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2022-10-17 10:30:59,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-10-17 10:30:59,370 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:30:59,370 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:30:59,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:30:59,370 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:30:59,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:30:59,371 INFO L85 PathProgramCache]: Analyzing trace with hash -1677666248, now seen corresponding path program 1 times [2022-10-17 10:30:59,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:30:59,372 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1057091554] [2022-10-17 10:30:59,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:30:59,372 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:30:59,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:30:59,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:30:59,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:30:59,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1057091554] [2022-10-17 10:30:59,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1057091554] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:30:59,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:30:59,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:30:59,610 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805024227] [2022-10-17 10:30:59,610 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:30:59,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:30:59,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:30:59,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:30:59,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:30:59,612 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:30:59,727 INFO L93 Difference]: Finished difference Result 142 states and 187 transitions. [2022-10-17 10:30:59,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:30:59,732 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-10-17 10:30:59,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:30:59,738 INFO L225 Difference]: With dead ends: 142 [2022-10-17 10:30:59,738 INFO L226 Difference]: Without dead ends: 75 [2022-10-17 10:30:59,739 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:30:59,742 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 125 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:30:59,744 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 206 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:30:59,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-10-17 10:30:59,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-10-17 10:30:59,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:30:59,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-10-17 10:30:59,757 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2022-10-17 10:30:59,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:30:59,758 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-10-17 10:30:59,758 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:30:59,758 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-10-17 10:30:59,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-10-17 10:30:59,760 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:30:59,761 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:30:59,761 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:30:59,761 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:30:59,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:30:59,762 INFO L85 PathProgramCache]: Analyzing trace with hash -1006789740, now seen corresponding path program 1 times [2022-10-17 10:30:59,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:30:59,763 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [377809104] [2022-10-17 10:30:59,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:30:59,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:30:59,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:30:59,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:30:59,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-10-17 10:30:59,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:30:59,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:30:59,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:30:59,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [377809104] [2022-10-17 10:30:59,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [377809104] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:30:59,922 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:30:59,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:30:59,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433165804] [2022-10-17 10:30:59,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:30:59,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:30:59,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:30:59,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:30:59,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:30:59,925 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:31:00,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:00,118 INFO L93 Difference]: Finished difference Result 217 states and 279 transitions. [2022-10-17 10:31:00,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:31:00,118 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-10-17 10:31:00,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:00,121 INFO L225 Difference]: With dead ends: 217 [2022-10-17 10:31:00,121 INFO L226 Difference]: Without dead ends: 150 [2022-10-17 10:31:00,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:31:00,123 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 179 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:00,124 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 303 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:31:00,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-10-17 10:31:00,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 144. [2022-10-17 10:31:00,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 120 states have internal predecessors, (144), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:31:00,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 179 transitions. [2022-10-17 10:31:00,150 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 179 transitions. Word has length 40 [2022-10-17 10:31:00,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:00,150 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 179 transitions. [2022-10-17 10:31:00,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:31:00,151 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 179 transitions. [2022-10-17 10:31:00,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-10-17 10:31:00,153 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:00,153 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:00,153 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:31:00,154 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:00,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:00,154 INFO L85 PathProgramCache]: Analyzing trace with hash -251696612, now seen corresponding path program 1 times [2022-10-17 10:31:00,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:00,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027996212] [2022-10-17 10:31:00,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:00,155 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:00,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:00,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:00,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-17 10:31:00,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:31:00,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:00,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027996212] [2022-10-17 10:31:00,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027996212] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:00,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:00,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:31:00,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58358561] [2022-10-17 10:31:00,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:00,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:31:00,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:00,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:31:00,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:31:00,319 INFO L87 Difference]: Start difference. First operand 144 states and 179 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:31:00,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:00,647 INFO L93 Difference]: Finished difference Result 416 states and 525 transitions. [2022-10-17 10:31:00,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-17 10:31:00,647 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-10-17 10:31:00,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:00,657 INFO L225 Difference]: With dead ends: 416 [2022-10-17 10:31:00,657 INFO L226 Difference]: Without dead ends: 280 [2022-10-17 10:31:00,662 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:31:00,669 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 154 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 439 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:00,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 439 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:31:00,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2022-10-17 10:31:00,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2022-10-17 10:31:00,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 203 states have (on average 1.2463054187192117) internal successors, (253), 218 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-10-17 10:31:00,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 325 transitions. [2022-10-17 10:31:00,750 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 325 transitions. Word has length 46 [2022-10-17 10:31:00,752 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:00,752 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 325 transitions. [2022-10-17 10:31:00,752 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:31:00,753 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 325 transitions. [2022-10-17 10:31:00,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-10-17 10:31:00,762 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:00,762 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:00,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:31:00,763 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:00,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:00,763 INFO L85 PathProgramCache]: Analyzing trace with hash 285200024, now seen corresponding path program 1 times [2022-10-17 10:31:00,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:00,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69821604] [2022-10-17 10:31:00,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:00,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:00,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:31:00,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:31:00,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:00,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-17 10:31:00,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:00,933 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:31:00,934 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:00,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69821604] [2022-10-17 10:31:00,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69821604] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:00,935 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:00,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:31:00,935 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [580115904] [2022-10-17 10:31:00,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:00,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:31:00,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:00,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:31:00,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:31:00,939 INFO L87 Difference]: Start difference. First operand 266 states and 325 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:31:01,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:01,414 INFO L93 Difference]: Finished difference Result 536 states and 656 transitions. [2022-10-17 10:31:01,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-10-17 10:31:01,415 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-10-17 10:31:01,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:01,419 INFO L225 Difference]: With dead ends: 536 [2022-10-17 10:31:01,419 INFO L226 Difference]: Without dead ends: 278 [2022-10-17 10:31:01,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-10-17 10:31:01,425 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 176 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:01,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 212 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:31:01,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2022-10-17 10:31:01,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 264. [2022-10-17 10:31:01,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 201 states have (on average 1.228855721393035) internal successors, (247), 216 states have internal predecessors, (247), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-10-17 10:31:01,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 319 transitions. [2022-10-17 10:31:01,461 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 319 transitions. Word has length 50 [2022-10-17 10:31:01,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:01,462 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 319 transitions. [2022-10-17 10:31:01,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:31:01,462 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 319 transitions. [2022-10-17 10:31:01,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-10-17 10:31:01,464 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:01,464 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:01,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:31:01,464 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:01,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:01,465 INFO L85 PathProgramCache]: Analyzing trace with hash 1652612629, now seen corresponding path program 1 times [2022-10-17 10:31:01,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:01,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101763910] [2022-10-17 10:31:01,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:01,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:01,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:01,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:31:01,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:01,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:31:01,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:01,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:01,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:01,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-17 10:31:01,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:01,629 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:31:01,630 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:01,630 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2101763910] [2022-10-17 10:31:01,630 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2101763910] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:01,630 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:01,630 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:31:01,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1018687825] [2022-10-17 10:31:01,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:01,631 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:31:01,631 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:01,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:31:01,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:31:01,632 INFO L87 Difference]: Start difference. First operand 264 states and 319 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:31:01,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:01,927 INFO L93 Difference]: Finished difference Result 538 states and 663 transitions. [2022-10-17 10:31:01,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:31:01,928 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-10-17 10:31:01,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:01,930 INFO L225 Difference]: With dead ends: 538 [2022-10-17 10:31:01,931 INFO L226 Difference]: Without dead ends: 282 [2022-10-17 10:31:01,932 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:31:01,935 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 129 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:01,935 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 201 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:31:01,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-10-17 10:31:01,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 270. [2022-10-17 10:31:01,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 270 states, 207 states have (on average 1.2222222222222223) internal successors, (253), 222 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-10-17 10:31:01,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 270 states to 270 states and 325 transitions. [2022-10-17 10:31:01,977 INFO L78 Accepts]: Start accepts. Automaton has 270 states and 325 transitions. Word has length 56 [2022-10-17 10:31:01,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:01,978 INFO L495 AbstractCegarLoop]: Abstraction has 270 states and 325 transitions. [2022-10-17 10:31:01,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:31:01,979 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 325 transitions. [2022-10-17 10:31:01,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-10-17 10:31:01,985 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:01,986 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:01,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:31:01,986 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:01,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:01,987 INFO L85 PathProgramCache]: Analyzing trace with hash -719126633, now seen corresponding path program 1 times [2022-10-17 10:31:01,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:01,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204071657] [2022-10-17 10:31:01,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:01,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:02,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:31:02,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:31:02,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:02,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-17 10:31:02,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,132 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:31:02,133 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:02,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204071657] [2022-10-17 10:31:02,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204071657] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:02,133 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:02,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:31:02,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765607686] [2022-10-17 10:31:02,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:02,134 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:31:02,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:02,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:31:02,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:31:02,136 INFO L87 Difference]: Start difference. First operand 270 states and 325 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:31:02,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:02,364 INFO L93 Difference]: Finished difference Result 550 states and 675 transitions. [2022-10-17 10:31:02,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:31:02,364 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-10-17 10:31:02,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:02,367 INFO L225 Difference]: With dead ends: 550 [2022-10-17 10:31:02,368 INFO L226 Difference]: Without dead ends: 288 [2022-10-17 10:31:02,369 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:31:02,370 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 130 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:02,372 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 179 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:31:02,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-10-17 10:31:02,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 274. [2022-10-17 10:31:02,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 211 states have (on average 1.2180094786729858) internal successors, (257), 226 states have internal predecessors, (257), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-10-17 10:31:02,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 329 transitions. [2022-10-17 10:31:02,426 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 329 transitions. Word has length 56 [2022-10-17 10:31:02,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:02,426 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 329 transitions. [2022-10-17 10:31:02,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:31:02,427 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 329 transitions. [2022-10-17 10:31:02,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-10-17 10:31:02,428 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:02,428 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:02,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:31:02,429 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:02,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:02,429 INFO L85 PathProgramCache]: Analyzing trace with hash 667076761, now seen corresponding path program 1 times [2022-10-17 10:31:02,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:02,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009082218] [2022-10-17 10:31:02,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:02,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:02,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:31:02,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:31:02,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:02,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-17 10:31:02,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:02,600 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:31:02,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:02,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009082218] [2022-10-17 10:31:02,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009082218] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:02,602 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:02,602 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:31:02,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453988717] [2022-10-17 10:31:02,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:02,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:31:02,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:02,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:31:02,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:31:02,605 INFO L87 Difference]: Start difference. First operand 274 states and 329 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-10-17 10:31:02,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:02,979 INFO L93 Difference]: Finished difference Result 762 states and 965 transitions. [2022-10-17 10:31:02,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-10-17 10:31:02,980 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-10-17 10:31:02,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:02,984 INFO L225 Difference]: With dead ends: 762 [2022-10-17 10:31:02,984 INFO L226 Difference]: Without dead ends: 496 [2022-10-17 10:31:02,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:31:02,987 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 285 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 287 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:02,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [287 Valid, 233 Invalid, 388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:31:02,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2022-10-17 10:31:03,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 494. [2022-10-17 10:31:03,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 375 states have (on average 1.2053333333333334) internal successors, (452), 398 states have internal predecessors, (452), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (95), 60 states have call predecessors, (95), 60 states have call successors, (95) [2022-10-17 10:31:03,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 607 transitions. [2022-10-17 10:31:03,066 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 607 transitions. Word has length 56 [2022-10-17 10:31:03,067 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:03,067 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 607 transitions. [2022-10-17 10:31:03,067 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-10-17 10:31:03,067 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 607 transitions. [2022-10-17 10:31:03,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-10-17 10:31:03,069 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:03,069 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:03,069 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:31:03,070 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:03,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:03,070 INFO L85 PathProgramCache]: Analyzing trace with hash -295766221, now seen corresponding path program 1 times [2022-10-17 10:31:03,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:03,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960014983] [2022-10-17 10:31:03,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:03,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:03,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:31:03,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:31:03,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-10-17 10:31:03,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:03,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-17 10:31:03,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,321 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-10-17 10:31:03,322 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:03,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960014983] [2022-10-17 10:31:03,323 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960014983] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:31:03,323 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [571151449] [2022-10-17 10:31:03,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:03,323 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:31:03,324 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:31:03,328 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:31:03,346 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:31:03,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:03,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-17 10:31:03,453 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:31:03,685 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:31:03,686 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:31:03,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [571151449] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:03,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:31:03,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-10-17 10:31:03,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129294895] [2022-10-17 10:31:03,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:03,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:31:03,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:03,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:31:03,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-10-17 10:31:03,688 INFO L87 Difference]: Start difference. First operand 494 states and 607 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-17 10:31:03,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:03,868 INFO L93 Difference]: Finished difference Result 958 states and 1182 transitions. [2022-10-17 10:31:03,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:31:03,869 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-10-17 10:31:03,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:03,873 INFO L225 Difference]: With dead ends: 958 [2022-10-17 10:31:03,873 INFO L226 Difference]: Without dead ends: 472 [2022-10-17 10:31:03,876 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-10-17 10:31:03,876 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 67 mSDsluCounter, 576 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 745 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:03,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 745 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:31:03,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2022-10-17 10:31:03,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 470. [2022-10-17 10:31:03,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 470 states, 356 states have (on average 1.1882022471910112) internal successors, (423), 378 states have internal predecessors, (423), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (82), 57 states have call predecessors, (82), 58 states have call successors, (82) [2022-10-17 10:31:03,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 470 states to 470 states and 563 transitions. [2022-10-17 10:31:03,946 INFO L78 Accepts]: Start accepts. Automaton has 470 states and 563 transitions. Word has length 60 [2022-10-17 10:31:03,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:03,946 INFO L495 AbstractCegarLoop]: Abstraction has 470 states and 563 transitions. [2022-10-17 10:31:03,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-17 10:31:03,947 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 563 transitions. [2022-10-17 10:31:03,949 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-10-17 10:31:03,949 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:03,949 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:03,980 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:31:04,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-10-17 10:31:04,173 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:04,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:04,174 INFO L85 PathProgramCache]: Analyzing trace with hash -738171045, now seen corresponding path program 1 times [2022-10-17 10:31:04,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:04,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983385956] [2022-10-17 10:31:04,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:04,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:04,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:31:04,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:04,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:31:04,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:04,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:31:04,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-10-17 10:31:04,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-10-17 10:31:04,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:31:04,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-17 10:31:04,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,344 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-17 10:31:04,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:04,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983385956] [2022-10-17 10:31:04,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1983385956] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:31:04,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1544712475] [2022-10-17 10:31:04,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:04,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:31:04,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:31:04,348 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:31:04,365 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:31:04,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:04,464 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-17 10:31:04,472 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:31:04,548 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:31:04,548 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-17 10:31:04,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1544712475] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:04,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-17 10:31:04,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-10-17 10:31:04,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [893347866] [2022-10-17 10:31:04,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:04,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:31:04,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:04,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:31:04,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:31:04,551 INFO L87 Difference]: Start difference. First operand 470 states and 563 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-17 10:31:04,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:04,633 INFO L93 Difference]: Finished difference Result 714 states and 867 transitions. [2022-10-17 10:31:04,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:31:04,634 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-10-17 10:31:04,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:04,640 INFO L225 Difference]: With dead ends: 714 [2022-10-17 10:31:04,640 INFO L226 Difference]: Without dead ends: 712 [2022-10-17 10:31:04,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:31:04,642 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 45 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:04,642 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 188 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:31:04,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2022-10-17 10:31:04,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 526. [2022-10-17 10:31:04,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 400 states have (on average 1.205) internal successors, (482), 423 states have internal predecessors, (482), 64 states have call successors, (64), 60 states have call predecessors, (64), 61 states have return successors, (98), 63 states have call predecessors, (98), 64 states have call successors, (98) [2022-10-17 10:31:04,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 644 transitions. [2022-10-17 10:31:04,708 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 644 transitions. Word has length 98 [2022-10-17 10:31:04,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:04,710 INFO L495 AbstractCegarLoop]: Abstraction has 526 states and 644 transitions. [2022-10-17 10:31:04,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-17 10:31:04,710 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 644 transitions. [2022-10-17 10:31:04,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-10-17 10:31:04,715 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:04,715 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:04,753 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-17 10:31:04,939 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-10-17 10:31:04,940 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:04,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:04,940 INFO L85 PathProgramCache]: Analyzing trace with hash -784141340, now seen corresponding path program 1 times [2022-10-17 10:31:04,940 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:04,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726146940] [2022-10-17 10:31:04,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:04,941 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:04,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:31:05,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:05,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:31:05,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:05,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:31:05,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-10-17 10:31:05,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-17 10:31:05,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-17 10:31:05,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:31:05,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:05,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-10-17 10:31:05,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:31:05,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-10-17 10:31:05,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,483 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-10-17 10:31:05,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:05,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726146940] [2022-10-17 10:31:05,483 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726146940] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:31:05,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [349335433] [2022-10-17 10:31:05,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:05,484 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:31:05,484 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:31:05,488 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:31:05,507 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-17 10:31:05,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:05,617 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-17 10:31:05,622 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:31:05,935 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:31:05,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:31:06,276 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-17 10:31:06,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [349335433] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:31:06,277 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:31:06,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2022-10-17 10:31:06,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452757661] [2022-10-17 10:31:06,277 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:31:06,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-10-17 10:31:06,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:06,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-10-17 10:31:06,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2022-10-17 10:31:06,280 INFO L87 Difference]: Start difference. First operand 526 states and 644 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-10-17 10:31:08,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:08,933 INFO L93 Difference]: Finished difference Result 1823 states and 2672 transitions. [2022-10-17 10:31:08,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-10-17 10:31:08,934 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2022-10-17 10:31:08,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:08,947 INFO L225 Difference]: With dead ends: 1823 [2022-10-17 10:31:08,947 INFO L226 Difference]: Without dead ends: 1395 [2022-10-17 10:31:08,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 300 SyntacticMatches, 5 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 526 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=593, Invalid=1759, Unknown=0, NotChecked=0, Total=2352 [2022-10-17 10:31:08,952 INFO L413 NwaCegarLoop]: 242 mSDtfsCounter, 1050 mSDsluCounter, 712 mSDsCounter, 0 mSdLazyCounter, 1943 mSolverCounterSat, 540 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1061 SdHoareTripleChecker+Valid, 954 SdHoareTripleChecker+Invalid, 2483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 540 IncrementalHoareTripleChecker+Valid, 1943 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:08,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1061 Valid, 954 Invalid, 2483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [540 Valid, 1943 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-10-17 10:31:08,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1395 states. [2022-10-17 10:31:09,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1395 to 952. [2022-10-17 10:31:09,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 952 states, 727 states have (on average 1.18707015130674) internal successors, (863), 768 states have internal predecessors, (863), 114 states have call successors, (114), 100 states have call predecessors, (114), 110 states have return successors, (180), 108 states have call predecessors, (180), 114 states have call successors, (180) [2022-10-17 10:31:09,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 952 states to 952 states and 1157 transitions. [2022-10-17 10:31:09,108 INFO L78 Accepts]: Start accepts. Automaton has 952 states and 1157 transitions. Word has length 139 [2022-10-17 10:31:09,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:09,109 INFO L495 AbstractCegarLoop]: Abstraction has 952 states and 1157 transitions. [2022-10-17 10:31:09,109 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-10-17 10:31:09,110 INFO L276 IsEmpty]: Start isEmpty. Operand 952 states and 1157 transitions. [2022-10-17 10:31:09,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-10-17 10:31:09,115 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:31:09,115 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:09,152 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-10-17 10:31:09,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-10-17 10:31:09,332 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:31:09,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:31:09,332 INFO L85 PathProgramCache]: Analyzing trace with hash -979242294, now seen corresponding path program 1 times [2022-10-17 10:31:09,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:31:09,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427379710] [2022-10-17 10:31:09,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:31:09,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:31:09,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:31:09,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:09,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:31:09,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:31:09,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-17 10:31:09,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-10-17 10:31:09,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-17 10:31:09,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-17 10:31:09,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:31:09,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:31:09,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-17 10:31:09,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-10-17 10:31:09,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:31:09,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2022-10-17 10:31:09,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:31:09,590 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-10-17 10:31:09,590 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:31:09,591 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427379710] [2022-10-17 10:31:09,591 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427379710] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:31:09,591 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:31:09,591 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-10-17 10:31:09,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247976399] [2022-10-17 10:31:09,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:31:09,592 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-17 10:31:09,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:31:09,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-17 10:31:09,593 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:31:09,593 INFO L87 Difference]: Start difference. First operand 952 states and 1157 transitions. Second operand has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-10-17 10:31:09,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:31:09,990 INFO L93 Difference]: Finished difference Result 1315 states and 1576 transitions. [2022-10-17 10:31:09,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-10-17 10:31:09,991 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 143 [2022-10-17 10:31:09,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:31:09,992 INFO L225 Difference]: With dead ends: 1315 [2022-10-17 10:31:09,992 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:31:09,997 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=200, Unknown=0, NotChecked=0, Total=272 [2022-10-17 10:31:09,998 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 171 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 418 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 471 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 418 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-17 10:31:09,998 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 237 Invalid, 471 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 418 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-17 10:31:09,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:31:09,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:31:10,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:31:10,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:31:10,000 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 143 [2022-10-17 10:31:10,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:31:10,001 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:31:10,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-10-17 10:31:10,001 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:31:10,001 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:31:10,004 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:31:10,005 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-10-17 10:31:10,007 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:31:15,785 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 370 376) no Hoare annotation was computed. [2022-10-17 10:31:15,786 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 370 376) the Hoare annotation is: true [2022-10-17 10:31:15,786 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-10-17 10:31:15,786 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse3) (or .cse4 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-10-17 10:31:15,786 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-10-17 10:31:15,786 INFO L899 garLoopResultBuilder]: For program point L547-2(lines 547 551) no Hoare annotation was computed. [2022-10-17 10:31:15,787 INFO L899 garLoopResultBuilder]: For program point L993(line 993) no Hoare annotation was computed. [2022-10-17 10:31:15,787 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 346 369) no Hoare annotation was computed. [2022-10-17 10:31:15,787 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-10-17 10:31:15,787 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 (and .cse5 .cse0 .cse6) .cse7) (or (and .cse5 (= ~methAndRunningLastTime~0 0) .cse6) .cse1 .cse2 .cse3 .cse7))) [2022-10-17 10:31:15,787 INFO L895 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse5))) [2022-10-17 10:31:15,788 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 349 368) no Hoare annotation was computed. [2022-10-17 10:31:15,788 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (and .cse3 .cse18 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse13 (and .cse16 (<= 2 ~waterLevel~0) .cse17 .cse18)) (.cse1 (not .cse17)) (.cse14 (not .cse16)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse8 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse10) (or .cse11 .cse0 .cse1 .cse9 .cse12) (or .cse13 .cse11 .cse0 .cse1 .cse14 .cse12) (or .cse13 .cse1 .cse14 (and .cse2 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse10)))) [2022-10-17 10:31:15,788 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 420) no Hoare annotation was computed. [2022-10-17 10:31:15,789 INFO L899 garLoopResultBuilder]: For program point L317-1(line 317) no Hoare annotation was computed. [2022-10-17 10:31:15,789 INFO L899 garLoopResultBuilder]: For program point L408(lines 408 425) no Hoare annotation was computed. [2022-10-17 10:31:15,789 INFO L895 garLoopResultBuilder]: At program point L553(lines 538 556) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse12 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse12) (and (not .cse12) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or (and .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10) .cse2 .cse4 .cse11) (or (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7 .cse8 .cse9 .cse10) .cse1 .cse2 .cse3 .cse11))) [2022-10-17 10:31:15,789 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse8) (or .cse2 .cse4 (and .cse5 .cse6 .cse0 .cse7) .cse8))) [2022-10-17 10:31:15,790 INFO L895 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse5) (or .cse6 .cse0 .cse1 .cse7) (or .cse6 .cse0 .cse1 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (or .cse1 .cse7 .cse5))) [2022-10-17 10:31:15,790 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 333) no Hoare annotation was computed. [2022-10-17 10:31:15,790 INFO L895 garLoopResultBuilder]: At program point L418(line 418) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse5))) [2022-10-17 10:31:15,790 INFO L899 garLoopResultBuilder]: For program point L319(lines 319 336) no Hoare annotation was computed. [2022-10-17 10:31:15,791 INFO L895 garLoopResultBuilder]: At program point L319-1(lines 311 339) the Hoare annotation is: (let ((.cse5 (= ~methAndRunningLastTime~0 0)) (.cse18 (= 1 ~systemActive~0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse20 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not .cse20)) (.cse12 (and .cse5 .cse20 (<= 2 ~waterLevel~0) .cse18 .cse15 .cse11)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse19 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse19) (and (not .cse19) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse18)) (.cse16 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse13) (or .cse3 .cse14 .cse0 (and .cse4 .cse5 .cse15 .cse11) .cse1 .cse12) (or .cse14 (and .cse2 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse0 .cse16 (and .cse17 .cse4 .cse18) .cse13) (or .cse3 .cse14 .cse0 .cse16 (and .cse17 .cse4 .cse5 .cse18 .cse15))))) [2022-10-17 10:31:15,791 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 346 369) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse8 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse4) (or .cse6 .cse0 .cse1 .cse2 .cse7) (or .cse6 .cse0 .cse1 .cse5 .cse7)))) [2022-10-17 10:31:15,791 INFO L895 garLoopResultBuilder]: At program point L460(lines 455 462) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse8 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (let ((.cse13 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse13) (and (not .cse13) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (and .cse5 .cse0 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse3 .cse12))) [2022-10-17 10:31:15,792 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 346 369) no Hoare annotation was computed. [2022-10-17 10:31:15,792 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2022-10-17 10:31:15,792 INFO L895 garLoopResultBuilder]: At program point L423(line 423) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse6 .cse9 .cse10)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 (and .cse5 .cse6) .cse7) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse2 .cse8 (and .cse5 .cse6 .cse9 .cse10) .cse7)))) [2022-10-17 10:31:15,792 INFO L895 garLoopResultBuilder]: At program point L423-1(lines 404 428) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (and .cse3 .cse18 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse13 (and .cse16 (<= 2 ~waterLevel~0) .cse17 .cse18)) (.cse1 (not .cse17)) (.cse14 (not .cse16)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse8 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse10) (or .cse11 .cse0 .cse1 .cse9 .cse12) (or .cse13 .cse11 .cse0 .cse1 .cse14 .cse12) (or .cse13 .cse1 .cse14 (and .cse2 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse10)))) [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L357-1(lines 357 363) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 551) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 201 230) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L222(line 222) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 201 230) the Hoare annotation is: true [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 219) no Hoare annotation was computed. [2022-10-17 10:31:15,793 INFO L902 garLoopResultBuilder]: At program point L215-1(lines 215 219) the Hoare annotation is: true [2022-10-17 10:31:15,793 INFO L899 garLoopResultBuilder]: For program point L212(line 212) no Hoare annotation was computed. [2022-10-17 10:31:15,794 INFO L902 garLoopResultBuilder]: At program point L211-2(lines 211 225) the Hoare annotation is: true [2022-10-17 10:31:15,794 INFO L902 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: true [2022-10-17 10:31:15,794 INFO L899 garLoopResultBuilder]: For program point L207-1(line 207) no Hoare annotation was computed. [2022-10-17 10:31:15,794 INFO L902 garLoopResultBuilder]: At program point L226(lines 201 230) the Hoare annotation is: true [2022-10-17 10:31:15,794 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2022-10-17 10:31:15,794 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-10-17 10:31:15,794 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-10-17 10:31:15,794 INFO L895 garLoopResultBuilder]: At program point L308(lines 303 310) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:31:15,795 INFO L895 garLoopResultBuilder]: At program point L614(lines 567 615) the Hoare annotation is: false [2022-10-17 10:31:15,795 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:31:15,795 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:31:15,795 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:31:15,795 INFO L899 garLoopResultBuilder]: For program point L569(lines 568 613) no Hoare annotation was computed. [2022-10-17 10:31:15,795 INFO L899 garLoopResultBuilder]: For program point L598(lines 598 609) no Hoare annotation was computed. [2022-10-17 10:31:15,795 INFO L895 garLoopResultBuilder]: At program point L590(line 590) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-10-17 10:31:15,795 INFO L895 garLoopResultBuilder]: At program point L260(lines 256 262) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:31:15,796 INFO L895 garLoopResultBuilder]: At program point L611(lines 568 613) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-10-17 10:31:15,796 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 584) no Hoare annotation was computed. [2022-10-17 10:31:15,796 INFO L899 garLoopResultBuilder]: For program point L578-1(lines 578 584) no Hoare annotation was computed. [2022-10-17 10:31:15,796 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:31:15,796 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 574) no Hoare annotation was computed. [2022-10-17 10:31:15,796 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:31:15,796 INFO L902 garLoopResultBuilder]: At program point L273(lines 265 275) the Hoare annotation is: true [2022-10-17 10:31:15,796 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:31:15,797 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2022-10-17 10:31:15,797 INFO L899 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2022-10-17 10:31:15,797 INFO L899 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2022-10-17 10:31:15,797 INFO L895 garLoopResultBuilder]: At program point L604-2(lines 598 609) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse4 .cse5 .cse6))) [2022-10-17 10:31:15,797 INFO L899 garLoopResultBuilder]: For program point L588(lines 588 594) no Hoare annotation was computed. [2022-10-17 10:31:15,797 INFO L899 garLoopResultBuilder]: For program point L588-1(lines 588 594) no Hoare annotation was computed. [2022-10-17 10:31:15,797 INFO L902 garLoopResultBuilder]: At program point L617(lines 558 621) the Hoare annotation is: true [2022-10-17 10:31:15,797 INFO L902 garLoopResultBuilder]: At program point L295(lines 276 298) the Hoare annotation is: true [2022-10-17 10:31:15,798 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:31:15,798 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-10-17 10:31:15,798 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 378 402) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse4 .cse5 .cse1 .cse3) (or .cse4 .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse2 .cse6))) [2022-10-17 10:31:15,798 INFO L899 garLoopResultBuilder]: For program point L382(lines 382 399) no Hoare annotation was computed. [2022-10-17 10:31:15,798 INFO L895 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not .cse2)) (.cse6 (and .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse6 .cse7) (or .cse4 .cse0 .cse6 .cse3 (and .cse8 .cse5)) (or .cse0 .cse1 .cse7 .cse2 (not (= ~methAndRunningLastTime~0 0)))))) [2022-10-17 10:31:15,799 INFO L895 garLoopResultBuilder]: At program point L434(lines 429 436) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse3 .cse0 (<= 2 ~waterLevel~0) .cse4) (or .cse3 .cse0 .cse2) (or .cse0 .cse1 .cse4))) [2022-10-17 10:31:15,799 INFO L895 garLoopResultBuilder]: At program point L397(line 397) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse5) (or .cse0 .cse1 .cse2 .cse5))) [2022-10-17 10:31:15,799 INFO L899 garLoopResultBuilder]: For program point L397-1(lines 378 402) no Hoare annotation was computed. [2022-10-17 10:31:15,799 INFO L899 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2022-10-17 10:31:15,799 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 378 402) no Hoare annotation was computed. [2022-10-17 10:31:15,799 INFO L895 garLoopResultBuilder]: At program point L445-2(lines 438 454) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse3 .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse3 .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse5))) [2022-10-17 10:31:15,800 INFO L895 garLoopResultBuilder]: At program point L534(lines 519 537) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse2)) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse5 .cse0 .cse3 .cse6 (and .cse7 .cse8)) (or .cse5 .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8) .cse4 .cse6)))) [2022-10-17 10:31:15,800 INFO L895 garLoopResultBuilder]: At program point L470(lines 463 473) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse1 .cse5 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse6 (and .cse3 .cse4)) (or .cse1 .cse5 .cse6))) [2022-10-17 10:31:15,800 INFO L895 garLoopResultBuilder]: At program point L468(line 468) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (or .cse1 .cse4 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse5 (and (= ~pumpRunning~0 0) .cse2)) (or .cse1 .cse4 .cse5))) [2022-10-17 10:31:15,800 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-10-17 10:31:15,800 INFO L899 garLoopResultBuilder]: For program point L468-1(line 468) no Hoare annotation was computed. [2022-10-17 10:31:15,800 INFO L899 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2022-10-17 10:31:15,800 INFO L899 garLoopResultBuilder]: For program point L528-2(lines 528 532) no Hoare annotation was computed. [2022-10-17 10:31:15,801 INFO L895 garLoopResultBuilder]: At program point L392(line 392) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse6 .cse2) (or .cse1 .cse5 .cse4 .cse6 (not (= ~methAndRunningLastTime~0 0)))))) [2022-10-17 10:31:15,801 INFO L899 garLoopResultBuilder]: For program point L386(lines 386 394) no Hoare annotation was computed. [2022-10-17 10:31:15,801 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-10-17 10:31:15,801 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-10-17 10:31:15,801 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-10-17 10:31:15,805 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:31:15,807 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:31:15,874 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:31:15 BoogieIcfgContainer [2022-10-17 10:31:15,874 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:31:15,875 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:31:15,875 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:31:15,875 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:31:15,876 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:30:58" (3/4) ... [2022-10-17 10:31:15,879 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:31:15,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:31:15,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:31:15,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:31:15,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:31:15,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:31:15,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:31:15,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:31:15,897 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-10-17 10:31:15,898 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:31:15,899 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:31:15,899 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:31:15,900 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:31:15,901 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:31:15,902 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:31:15,928 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:31:15,929 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:31:15,929 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:31:15,929 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-10-17 10:31:15,930 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,931 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) [2022-10-17 10:31:15,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-10-17 10:31:15,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-10-17 10:31:15,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0)) [2022-10-17 10:31:15,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-10-17 10:31:15,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,935 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) [2022-10-17 10:31:15,935 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-10-17 10:31:15,963 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:31:15,964 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:31:15,964 INFO L158 Benchmark]: Toolchain (without parser) took 18749.96ms. Allocated memory was 98.6MB in the beginning and 251.7MB in the end (delta: 153.1MB). Free memory was 62.6MB in the beginning and 167.9MB in the end (delta: -105.3MB). Peak memory consumption was 47.2MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,965 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 98.6MB. Free memory was 68.9MB in the beginning and 68.9MB in the end (delta: 30.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:31:15,965 INFO L158 Benchmark]: CACSL2BoogieTranslator took 483.43ms. Allocated memory is still 98.6MB. Free memory was 62.4MB in the beginning and 63.1MB in the end (delta: -677.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,966 INFO L158 Benchmark]: Boogie Procedure Inliner took 95.83ms. Allocated memory is still 98.6MB. Free memory was 63.1MB in the beginning and 60.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,966 INFO L158 Benchmark]: Boogie Preprocessor took 61.28ms. Allocated memory is still 98.6MB. Free memory was 60.5MB in the beginning and 58.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,967 INFO L158 Benchmark]: RCFGBuilder took 662.11ms. Allocated memory was 98.6MB in the beginning and 119.5MB in the end (delta: 21.0MB). Free memory was 58.8MB in the beginning and 90.5MB in the end (delta: -31.7MB). Peak memory consumption was 21.8MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,967 INFO L158 Benchmark]: TraceAbstraction took 17351.37ms. Allocated memory was 119.5MB in the beginning and 251.7MB in the end (delta: 132.1MB). Free memory was 89.9MB in the beginning and 174.2MB in the end (delta: -84.2MB). Peak memory consumption was 151.8MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,967 INFO L158 Benchmark]: Witness Printer took 89.06ms. Allocated memory is still 251.7MB. Free memory was 174.2MB in the beginning and 167.9MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-10-17 10:31:15,969 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 98.6MB. Free memory was 68.9MB in the beginning and 68.9MB in the end (delta: 30.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 483.43ms. Allocated memory is still 98.6MB. Free memory was 62.4MB in the beginning and 63.1MB in the end (delta: -677.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 95.83ms. Allocated memory is still 98.6MB. Free memory was 63.1MB in the beginning and 60.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 61.28ms. Allocated memory is still 98.6MB. Free memory was 60.5MB in the beginning and 58.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 662.11ms. Allocated memory was 98.6MB in the beginning and 119.5MB in the end (delta: 21.0MB). Free memory was 58.8MB in the beginning and 90.5MB in the end (delta: -31.7MB). Peak memory consumption was 21.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17351.37ms. Allocated memory was 119.5MB in the beginning and 251.7MB in the end (delta: 132.1MB). Free memory was 89.9MB in the beginning and 174.2MB in the end (delta: -84.2MB). Peak memory consumption was 151.8MB. Max. memory is 16.1GB. * Witness Printer took 89.06ms. Allocated memory is still 251.7MB. Free memory was 174.2MB in the beginning and 167.9MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.2s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2555 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2523 mSDsluCounter, 4191 SdHoareTripleChecker+Invalid, 2.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2638 mSDsCounter, 956 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3988 IncrementalHoareTripleChecker+Invalid, 4944 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 956 mSolverCounterUnsat, 1553 mSDtfsCounter, 3988 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 738 GetRequests, 581 SyntacticMatches, 5 SemanticMatches, 152 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 647 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=952occurred in iteration=12, InterpolantAutomatonStates: 132, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 693 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1746 PreInvPairs, 1937 NumberOfFragments, 2732 HoareAnnotationTreeSize, 1746 FomulaSimplifications, 104 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 43 FomulaSimplificationsInter, 14606 FormulaSimplificationTreeSizeReductionInter, 5.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.5s InterpolantComputationTime, 1122 NumberOfCodeBlocks, 1122 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1244 ConstructedInterpolants, 0 QuantifiedInterpolants, 2475 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1453 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 428/471 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 256]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-10-17 10:31:16,042 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ba002a04-16d5-4540-bfda-bcc21c9a7375/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE