./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:21:16,239 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:21:16,244 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:21:16,294 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:21:16,295 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:21:16,300 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:21:16,303 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:21:16,307 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:21:16,310 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:21:16,319 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:21:16,320 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:21:16,323 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:21:16,324 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:21:16,327 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:21:16,331 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:21:16,333 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:21:16,335 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:21:16,336 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:21:16,338 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:21:16,349 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:21:16,351 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:21:16,353 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:21:16,357 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:21:16,358 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:21:16,363 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:21:16,364 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:21:16,364 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:21:16,367 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:21:16,367 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:21:16,369 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:21:16,370 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:21:16,371 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:21:16,374 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:21:16,375 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:21:16,377 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:21:16,377 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:21:16,378 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:21:16,378 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:21:16,378 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:21:16,379 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:21:16,380 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:21:16,381 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:21:16,437 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:21:16,437 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:21:16,438 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:21:16,438 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:21:16,439 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:21:16,439 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:21:16,440 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:21:16,440 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:21:16,441 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:21:16,441 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:21:16,442 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:21:16,442 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:21:16,443 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:21:16,443 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:21:16,443 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:21:16,443 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:21:16,444 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:21:16,444 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:21:16,444 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:21:16,444 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:21:16,444 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:21:16,445 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:21:16,445 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:21:16,445 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:21:16,446 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:21:16,446 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:21:16,446 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:21:16,446 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:21:16,447 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:21:16,447 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:21:16,447 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:21:16,447 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:21:16,448 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:21:16,448 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb [2022-10-17 10:21:16,752 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:21:16,797 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:21:16,800 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:21:16,802 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:21:16,803 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:21:16,804 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2022-10-17 10:21:16,877 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/data/d26f7eda6/c2223ee6752e49bab2ec6b49c2c23514/FLAG0d11c53c3 [2022-10-17 10:21:17,531 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:21:17,532 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2022-10-17 10:21:17,547 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/data/d26f7eda6/c2223ee6752e49bab2ec6b49c2c23514/FLAG0d11c53c3 [2022-10-17 10:21:17,768 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/data/d26f7eda6/c2223ee6752e49bab2ec6b49c2c23514 [2022-10-17 10:21:17,774 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:21:17,780 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:21:17,781 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:21:17,781 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:21:17,785 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:21:17,785 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:21:17" (1/1) ... [2022-10-17 10:21:17,787 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@a21caf3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:17, skipping insertion in model container [2022-10-17 10:21:17,787 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:21:17" (1/1) ... [2022-10-17 10:21:17,799 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:21:17,861 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:21:18,194 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2022-10-17 10:21:18,245 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:21:18,266 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:21:18,400 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2022-10-17 10:21:18,423 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:21:18,451 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:21:18,452 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18 WrapperNode [2022-10-17 10:21:18,452 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:21:18,454 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:21:18,454 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:21:18,454 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:21:18,463 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,489 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,538 INFO L138 Inliner]: procedures = 54, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 254 [2022-10-17 10:21:18,538 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:21:18,539 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:21:18,539 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:21:18,540 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:21:18,549 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,550 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,564 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,570 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,577 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,598 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,599 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,601 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,604 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:21:18,605 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:21:18,609 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:21:18,609 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:21:18,610 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (1/1) ... [2022-10-17 10:21:18,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:21:18,634 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:21:18,652 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:21:18,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:21:18,714 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:21:18,714 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:21:18,714 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:21:18,715 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-10-17 10:21:18,715 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-10-17 10:21:18,715 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:21:18,715 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:21:18,715 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:21:18,716 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:21:18,717 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:21:18,717 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:21:18,717 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:21:18,717 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:21:18,717 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:21:18,718 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:21:18,718 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:21:18,718 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:21:18,718 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:21:18,849 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:21:18,851 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:21:19,402 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:21:19,411 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:21:19,412 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:21:19,414 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:21:19 BoogieIcfgContainer [2022-10-17 10:21:19,415 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:21:19,418 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:21:19,418 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:21:19,423 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:21:19,423 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:21:17" (1/3) ... [2022-10-17 10:21:19,424 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2dca2292 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:21:19, skipping insertion in model container [2022-10-17 10:21:19,424 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:21:18" (2/3) ... [2022-10-17 10:21:19,425 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2dca2292 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:21:19, skipping insertion in model container [2022-10-17 10:21:19,425 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:21:19" (3/3) ... [2022-10-17 10:21:19,427 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product38.cil.c [2022-10-17 10:21:19,449 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:21:19,450 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:21:19,612 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:21:19,620 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@333d9dac, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:21:19,620 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:21:19,636 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-10-17 10:21:19,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-10-17 10:21:19,650 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:19,651 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:19,652 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:19,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:19,660 INFO L85 PathProgramCache]: Analyzing trace with hash -1928340701, now seen corresponding path program 1 times [2022-10-17 10:21:19,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:19,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [314923447] [2022-10-17 10:21:19,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:19,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:19,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:19,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:21:19,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:19,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:19,933 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:19,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [314923447] [2022-10-17 10:21:19,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [314923447] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:19,934 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:19,934 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:21:19,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116278675] [2022-10-17 10:21:19,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:19,949 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:21:19,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:19,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:21:19,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:21:19,994 INFO L87 Difference]: Start difference. First operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:20,047 INFO L93 Difference]: Finished difference Result 168 states and 229 transitions. [2022-10-17 10:21:20,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:21:20,052 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-10-17 10:21:20,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:20,071 INFO L225 Difference]: With dead ends: 168 [2022-10-17 10:21:20,071 INFO L226 Difference]: Without dead ends: 79 [2022-10-17 10:21:20,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:21:20,079 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:20,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:21:20,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-10-17 10:21:20,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-10-17 10:21:20,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:21:20,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-10-17 10:21:20,158 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-10-17 10:21:20,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:20,159 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-10-17 10:21:20,160 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,160 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-10-17 10:21:20,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-10-17 10:21:20,165 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:20,165 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:20,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:21:20,166 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:20,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:20,167 INFO L85 PathProgramCache]: Analyzing trace with hash -2041135719, now seen corresponding path program 1 times [2022-10-17 10:21:20,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:20,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [210998352] [2022-10-17 10:21:20,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:20,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:20,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:20,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:21:20,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:20,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:20,401 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:20,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [210998352] [2022-10-17 10:21:20,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [210998352] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:20,403 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:20,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:21:20,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [879904436] [2022-10-17 10:21:20,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:20,407 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:21:20,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:20,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:21:20,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:21:20,409 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:20,446 INFO L93 Difference]: Finished difference Result 123 states and 159 transitions. [2022-10-17 10:21:20,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:21:20,449 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-10-17 10:21:20,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:20,455 INFO L225 Difference]: With dead ends: 123 [2022-10-17 10:21:20,457 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:21:20,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:21:20,464 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 13 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:20,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:21:20,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:21:20,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:21:20,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 61 states have internal predecessors, (72), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:21:20,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-10-17 10:21:20,489 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-10-17 10:21:20,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:20,489 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-10-17 10:21:20,490 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,490 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-10-17 10:21:20,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-10-17 10:21:20,492 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:20,492 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:20,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:21:20,493 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:20,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:20,493 INFO L85 PathProgramCache]: Analyzing trace with hash 1999159483, now seen corresponding path program 1 times [2022-10-17 10:21:20,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:20,494 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1659387321] [2022-10-17 10:21:20,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:20,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:20,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:20,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:20,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:20,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:20,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:20,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1659387321] [2022-10-17 10:21:20,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1659387321] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:20,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:20,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:21:20,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020812850] [2022-10-17 10:21:20,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:20,774 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:21:20,774 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:20,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:21:20,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:21:20,775 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:20,923 INFO L93 Difference]: Finished difference Result 133 states and 174 transitions. [2022-10-17 10:21:20,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-17 10:21:20,923 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-10-17 10:21:20,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:20,925 INFO L225 Difference]: With dead ends: 133 [2022-10-17 10:21:20,926 INFO L226 Difference]: Without dead ends: 70 [2022-10-17 10:21:20,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:21:20,928 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 115 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:20,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 185 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:21:20,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-10-17 10:21:20,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-10-17 10:21:20,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 61 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:21:20,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-10-17 10:21:20,944 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 31 [2022-10-17 10:21:20,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:20,944 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-10-17 10:21:20,945 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-10-17 10:21:20,945 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-10-17 10:21:20,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-10-17 10:21:20,947 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:20,947 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:20,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:21:20,948 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:20,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:20,948 INFO L85 PathProgramCache]: Analyzing trace with hash 1128329484, now seen corresponding path program 1 times [2022-10-17 10:21:20,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:20,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854033329] [2022-10-17 10:21:20,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:20,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:20,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:21,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:21:21,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-10-17 10:21:21,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:21,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:21,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854033329] [2022-10-17 10:21:21,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854033329] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:21,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:21,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:21:21,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573104164] [2022-10-17 10:21:21,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:21,201 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:21:21,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:21,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:21:21,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:21:21,202 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:21:21,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:21,461 INFO L93 Difference]: Finished difference Result 211 states and 269 transitions. [2022-10-17 10:21:21,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:21:21,462 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-10-17 10:21:21,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:21,486 INFO L225 Difference]: With dead ends: 211 [2022-10-17 10:21:21,486 INFO L226 Difference]: Without dead ends: 148 [2022-10-17 10:21:21,487 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-17 10:21:21,488 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 167 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:21,489 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 306 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:21:21,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2022-10-17 10:21:21,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 142. [2022-10-17 10:21:21,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 110 states have (on average 1.2727272727272727) internal successors, (140), 117 states have internal predecessors, (140), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:21:21,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2022-10-17 10:21:21,514 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 41 [2022-10-17 10:21:21,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:21,515 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2022-10-17 10:21:21,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:21:21,515 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2022-10-17 10:21:21,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:21:21,517 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:21,517 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:21,517 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:21:21,517 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:21,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:21,518 INFO L85 PathProgramCache]: Analyzing trace with hash 1086887613, now seen corresponding path program 1 times [2022-10-17 10:21:21,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:21,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112677315] [2022-10-17 10:21:21,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:21,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:21,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:21,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:21:21,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:21,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:21,704 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:21,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112677315] [2022-10-17 10:21:21,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112677315] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:21,704 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:21,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:21:21,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [797963273] [2022-10-17 10:21:21,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:21,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:21:21,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:21,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:21:21,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:21:21,715 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:21,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:21,896 INFO L93 Difference]: Finished difference Result 285 states and 355 transitions. [2022-10-17 10:21:21,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:21:21,897 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:21:21,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:21,901 INFO L225 Difference]: With dead ends: 285 [2022-10-17 10:21:21,901 INFO L226 Difference]: Without dead ends: 150 [2022-10-17 10:21:21,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:21:21,908 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 59 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:21,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 369 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:21:21,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-10-17 10:21:21,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 145. [2022-10-17 10:21:21,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 113 states have (on average 1.2654867256637168) internal successors, (143), 120 states have internal predecessors, (143), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:21:21,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 178 transitions. [2022-10-17 10:21:21,948 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 178 transitions. Word has length 45 [2022-10-17 10:21:21,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:21,950 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 178 transitions. [2022-10-17 10:21:21,951 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:21,951 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 178 transitions. [2022-10-17 10:21:21,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:21:21,959 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:21,959 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:21,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:21:21,960 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:21,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:21,960 INFO L85 PathProgramCache]: Analyzing trace with hash 269239163, now seen corresponding path program 1 times [2022-10-17 10:21:21,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:21,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669249032] [2022-10-17 10:21:21,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:21,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:21,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:22,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:21:22,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:22,141 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:22,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669249032] [2022-10-17 10:21:22,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669249032] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:22,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:22,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:21:22,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [225759091] [2022-10-17 10:21:22,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:22,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:21:22,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:22,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:21:22,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:21:22,144 INFO L87 Difference]: Start difference. First operand 145 states and 178 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:22,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:22,326 INFO L93 Difference]: Finished difference Result 293 states and 366 transitions. [2022-10-17 10:21:22,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:21:22,331 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:21:22,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:22,338 INFO L225 Difference]: With dead ends: 293 [2022-10-17 10:21:22,338 INFO L226 Difference]: Without dead ends: 155 [2022-10-17 10:21:22,339 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:21:22,344 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 95 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 407 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:22,347 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 407 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:21:22,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-10-17 10:21:22,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 147. [2022-10-17 10:21:22,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 115 states have (on average 1.2608695652173914) internal successors, (145), 122 states have internal predecessors, (145), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-10-17 10:21:22,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 180 transitions. [2022-10-17 10:21:22,395 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 180 transitions. Word has length 45 [2022-10-17 10:21:22,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:22,396 INFO L495 AbstractCegarLoop]: Abstraction has 147 states and 180 transitions. [2022-10-17 10:21:22,396 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:22,396 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 180 transitions. [2022-10-17 10:21:22,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-17 10:21:22,399 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:22,399 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:22,399 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:21:22,400 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:22,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:22,400 INFO L85 PathProgramCache]: Analyzing trace with hash 488093881, now seen corresponding path program 1 times [2022-10-17 10:21:22,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:22,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1509891185] [2022-10-17 10:21:22,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:22,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:22,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:22,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-17 10:21:22,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:22,634 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:22,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:22,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1509891185] [2022-10-17 10:21:22,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1509891185] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:22,635 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:22,635 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:21:22,636 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370453035] [2022-10-17 10:21:22,636 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:22,637 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:21:22,637 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:22,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:21:22,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:21:22,638 INFO L87 Difference]: Start difference. First operand 147 states and 180 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:22,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:22,947 INFO L93 Difference]: Finished difference Result 414 states and 528 transitions. [2022-10-17 10:21:22,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:21:22,948 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-10-17 10:21:22,948 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:22,953 INFO L225 Difference]: With dead ends: 414 [2022-10-17 10:21:22,953 INFO L226 Difference]: Without dead ends: 274 [2022-10-17 10:21:22,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:21:22,958 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 201 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:22,958 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 305 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:21:22,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2022-10-17 10:21:22,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 266. [2022-10-17 10:21:22,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 206 states have (on average 1.2524271844660195) internal successors, (258), 217 states have internal predecessors, (258), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-10-17 10:21:22,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 333 transitions. [2022-10-17 10:21:23,000 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 333 transitions. Word has length 45 [2022-10-17 10:21:23,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:23,001 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 333 transitions. [2022-10-17 10:21:23,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:21:23,001 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 333 transitions. [2022-10-17 10:21:23,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-10-17 10:21:23,003 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:23,003 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:23,004 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:21:23,004 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:23,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:23,004 INFO L85 PathProgramCache]: Analyzing trace with hash -2000597692, now seen corresponding path program 1 times [2022-10-17 10:21:23,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:23,005 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834742079] [2022-10-17 10:21:23,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:23,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:23,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:23,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:21:23,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-17 10:21:23,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:23,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:23,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834742079] [2022-10-17 10:21:23,216 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834742079] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:23,216 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:23,216 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:21:23,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468883386] [2022-10-17 10:21:23,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:23,217 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:21:23,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:23,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:21:23,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:21:23,219 INFO L87 Difference]: Start difference. First operand 266 states and 333 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:21:23,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:23,443 INFO L93 Difference]: Finished difference Result 528 states and 661 transitions. [2022-10-17 10:21:23,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:21:23,444 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-10-17 10:21:23,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:23,450 INFO L225 Difference]: With dead ends: 528 [2022-10-17 10:21:23,450 INFO L226 Difference]: Without dead ends: 269 [2022-10-17 10:21:23,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-17 10:21:23,452 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 108 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:23,453 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 332 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:21:23,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2022-10-17 10:21:23,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 264. [2022-10-17 10:21:23,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 204 states have (on average 1.2450980392156863) internal successors, (254), 215 states have internal predecessors, (254), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-10-17 10:21:23,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 329 transitions. [2022-10-17 10:21:23,485 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 329 transitions. Word has length 47 [2022-10-17 10:21:23,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:23,485 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 329 transitions. [2022-10-17 10:21:23,485 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:21:23,486 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 329 transitions. [2022-10-17 10:21:23,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-10-17 10:21:23,487 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:23,487 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:23,487 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:21:23,488 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:23,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:23,488 INFO L85 PathProgramCache]: Analyzing trace with hash 568530835, now seen corresponding path program 1 times [2022-10-17 10:21:23,488 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:23,488 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1903976775] [2022-10-17 10:21:23,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:23,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:23,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:21:23,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:21:23,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-17 10:21:23,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:23,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:23,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:23,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1903976775] [2022-10-17 10:21:23,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1903976775] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:23,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:23,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-10-17 10:21:23,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007300447] [2022-10-17 10:21:23,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:23,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-17 10:21:23,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:23,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-17 10:21:23,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:21:23,689 INFO L87 Difference]: Start difference. First operand 264 states and 329 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:21:24,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:24,323 INFO L93 Difference]: Finished difference Result 534 states and 669 transitions. [2022-10-17 10:21:24,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-10-17 10:21:24,324 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-10-17 10:21:24,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:24,328 INFO L225 Difference]: With dead ends: 534 [2022-10-17 10:21:24,328 INFO L226 Difference]: Without dead ends: 324 [2022-10-17 10:21:24,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=128, Invalid=424, Unknown=0, NotChecked=0, Total=552 [2022-10-17 10:21:24,333 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 289 mSDsluCounter, 526 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 675 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:24,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 675 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-10-17 10:21:24,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2022-10-17 10:21:24,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 299. [2022-10-17 10:21:24,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 232 states have (on average 1.2241379310344827) internal successors, (284), 246 states have internal predecessors, (284), 34 states have call successors, (34), 28 states have call predecessors, (34), 32 states have return successors, (46), 34 states have call predecessors, (46), 34 states have call successors, (46) [2022-10-17 10:21:24,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 364 transitions. [2022-10-17 10:21:24,388 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 364 transitions. Word has length 49 [2022-10-17 10:21:24,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:24,388 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 364 transitions. [2022-10-17 10:21:24,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:21:24,389 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 364 transitions. [2022-10-17 10:21:24,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-17 10:21:24,390 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:24,390 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:24,390 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:21:24,390 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:24,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:24,391 INFO L85 PathProgramCache]: Analyzing trace with hash -2144109732, now seen corresponding path program 1 times [2022-10-17 10:21:24,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:24,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400776207] [2022-10-17 10:21:24,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:24,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:24,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:21:24,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:21:24,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:21:24,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-17 10:21:24,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,517 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:24,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:24,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400776207] [2022-10-17 10:21:24,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400776207] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:24,518 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:24,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:21:24,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600487382] [2022-10-17 10:21:24,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:24,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:21:24,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:24,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:21:24,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:21:24,521 INFO L87 Difference]: Start difference. First operand 299 states and 364 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:21:24,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:24,752 INFO L93 Difference]: Finished difference Result 543 states and 669 transitions. [2022-10-17 10:21:24,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-17 10:21:24,753 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-10-17 10:21:24,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:24,757 INFO L225 Difference]: With dead ends: 543 [2022-10-17 10:21:24,757 INFO L226 Difference]: Without dead ends: 300 [2022-10-17 10:21:24,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:21:24,759 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 132 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:24,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 292 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:21:24,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2022-10-17 10:21:24,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 296. [2022-10-17 10:21:24,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 229 states have (on average 1.222707423580786) internal successors, (280), 243 states have internal predecessors, (280), 34 states have call successors, (34), 28 states have call predecessors, (34), 32 states have return successors, (46), 34 states have call predecessors, (46), 34 states have call successors, (46) [2022-10-17 10:21:24,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 360 transitions. [2022-10-17 10:21:24,801 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 360 transitions. Word has length 51 [2022-10-17 10:21:24,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:24,802 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 360 transitions. [2022-10-17 10:21:24,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:21:24,802 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 360 transitions. [2022-10-17 10:21:24,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-17 10:21:24,803 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:24,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:24,804 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-10-17 10:21:24,804 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:24,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:24,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1925255014, now seen corresponding path program 1 times [2022-10-17 10:21:24,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:24,805 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1802414368] [2022-10-17 10:21:24,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:24,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:24,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:21:24,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:21:24,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:21:24,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-17 10:21:24,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:24,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:21:24,971 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:24,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1802414368] [2022-10-17 10:21:24,972 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1802414368] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:21:24,972 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:21:24,972 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:21:24,972 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910192612] [2022-10-17 10:21:24,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:21:24,973 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:21:24,973 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:24,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:21:24,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:21:24,974 INFO L87 Difference]: Start difference. First operand 296 states and 360 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:21:25,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:25,248 INFO L93 Difference]: Finished difference Result 514 states and 631 transitions. [2022-10-17 10:21:25,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-17 10:21:25,249 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-10-17 10:21:25,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:25,252 INFO L225 Difference]: With dead ends: 514 [2022-10-17 10:21:25,252 INFO L226 Difference]: Without dead ends: 274 [2022-10-17 10:21:25,253 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-10-17 10:21:25,254 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 122 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 362 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:25,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 362 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:21:25,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2022-10-17 10:21:25,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 270. [2022-10-17 10:21:25,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 270 states, 210 states have (on average 1.2190476190476192) internal successors, (256), 223 states have internal predecessors, (256), 31 states have call successors, (31), 25 states have call predecessors, (31), 28 states have return successors, (39), 30 states have call predecessors, (39), 31 states have call successors, (39) [2022-10-17 10:21:25,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 270 states to 270 states and 326 transitions. [2022-10-17 10:21:25,288 INFO L78 Accepts]: Start accepts. Automaton has 270 states and 326 transitions. Word has length 51 [2022-10-17 10:21:25,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:25,288 INFO L495 AbstractCegarLoop]: Abstraction has 270 states and 326 transitions. [2022-10-17 10:21:25,289 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-17 10:21:25,289 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 326 transitions. [2022-10-17 10:21:25,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-10-17 10:21:25,290 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:21:25,290 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:25,291 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-10-17 10:21:25,291 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:21:25,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:21:25,292 INFO L85 PathProgramCache]: Analyzing trace with hash 896506289, now seen corresponding path program 1 times [2022-10-17 10:21:25,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:21:25,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1325272153] [2022-10-17 10:21:25,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:25,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:21:25,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-17 10:21:25,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:21:25,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-17 10:21:25,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-17 10:21:25,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-17 10:21:25,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-10-17 10:21:25,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,454 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-10-17 10:21:25,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:21:25,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1325272153] [2022-10-17 10:21:25,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1325272153] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:21:25,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [804891635] [2022-10-17 10:21:25,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:21:25,456 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:21:25,456 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:21:25,458 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:21:25,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:21:25,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:21:25,581 INFO L263 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 13 conjunts are in the unsatisfiable core [2022-10-17 10:21:25,589 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:21:25,816 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-10-17 10:21:25,816 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:21:26,206 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-10-17 10:21:26,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [804891635] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:21:26,207 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:21:26,207 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 9] total 19 [2022-10-17 10:21:26,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828778935] [2022-10-17 10:21:26,207 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:21:26,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-10-17 10:21:26,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:21:26,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-10-17 10:21:26,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=282, Unknown=0, NotChecked=0, Total=342 [2022-10-17 10:21:26,210 INFO L87 Difference]: Start difference. First operand 270 states and 326 transitions. Second operand has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2022-10-17 10:21:27,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:21:27,929 INFO L93 Difference]: Finished difference Result 814 states and 1054 transitions. [2022-10-17 10:21:27,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-10-17 10:21:27,930 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) Word has length 83 [2022-10-17 10:21:27,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:21:27,931 INFO L225 Difference]: With dead ends: 814 [2022-10-17 10:21:27,931 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:21:27,937 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 167 SyntacticMatches, 7 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1224 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=927, Invalid=3765, Unknown=0, NotChecked=0, Total=4692 [2022-10-17 10:21:27,938 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 1040 mSDsluCounter, 642 mSDsCounter, 0 mSdLazyCounter, 1053 mSolverCounterSat, 506 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1040 SdHoareTripleChecker+Valid, 766 SdHoareTripleChecker+Invalid, 1559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 506 IncrementalHoareTripleChecker+Valid, 1053 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-10-17 10:21:27,938 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1040 Valid, 766 Invalid, 1559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [506 Valid, 1053 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-10-17 10:21:27,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:21:27,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:21:27,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:21:27,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:21:27,940 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 83 [2022-10-17 10:21:27,940 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:21:27,940 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:21:27,940 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2022-10-17 10:21:27,941 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:21:27,941 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:21:27,944 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:21:27,991 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-17 10:21:28,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:21:28,161 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:21:32,757 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 196 202) no Hoare annotation was computed. [2022-10-17 10:21:32,757 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 196 202) the Hoare annotation is: true [2022-10-17 10:21:32,758 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 853 864) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point L857-1(lines 853 864) no Hoare annotation was computed. [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 853 864) no Hoare annotation was computed. [2022-10-17 10:21:32,758 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 865 873) the Hoare annotation is: true [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 865 873) no Hoare annotation was computed. [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 865 873) no Hoare annotation was computed. [2022-10-17 10:21:32,758 INFO L902 garLoopResultBuilder]: At program point L737(line 737) the Hoare annotation is: true [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point L737-1(line 737) no Hoare annotation was computed. [2022-10-17 10:21:32,758 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 731 760) no Hoare annotation was computed. [2022-10-17 10:21:32,759 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 731 760) the Hoare annotation is: true [2022-10-17 10:21:32,759 INFO L902 garLoopResultBuilder]: At program point L756(lines 731 760) the Hoare annotation is: true [2022-10-17 10:21:32,759 INFO L899 garLoopResultBuilder]: For program point L752(line 752) no Hoare annotation was computed. [2022-10-17 10:21:32,759 INFO L899 garLoopResultBuilder]: For program point L745(lines 745 749) no Hoare annotation was computed. [2022-10-17 10:21:32,759 INFO L902 garLoopResultBuilder]: At program point L745-1(lines 745 749) the Hoare annotation is: true [2022-10-17 10:21:32,759 INFO L899 garLoopResultBuilder]: For program point L742(line 742) no Hoare annotation was computed. [2022-10-17 10:21:32,759 INFO L902 garLoopResultBuilder]: At program point L741-2(lines 741 755) the Hoare annotation is: true [2022-10-17 10:21:32,759 INFO L895 garLoopResultBuilder]: At program point L287(lines 282 290) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-10-17 10:21:32,759 INFO L899 garLoopResultBuilder]: For program point L725(line 725) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L176-1(lines 175 194) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 246) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L234(lines 234 251) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L895 garLoopResultBuilder]: At program point L936-1(lines 921 953) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse12 .cse4 .cse5)) (.cse1 (not .cse12)) (.cse10 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) (<= |timeShift_getWaterLevel_#res#1| 1))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse2 .cse3 .cse8 .cse5) .cse1 .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse8 .cse5) .cse6)) (or .cse0 .cse1 .cse10 .cse11 .cse6 .cse7) (or .cse1 .cse10 .cse9 .cse11 .cse6)))) [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 172 195) no Hoare annotation was computed. [2022-10-17 10:21:32,760 INFO L899 garLoopResultBuilder]: For program point L833(lines 833 837) no Hoare annotation was computed. [2022-10-17 10:21:32,761 INFO L895 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse3 .cse1 .cse2) .cse4)) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse1 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) .cse4)))) [2022-10-17 10:21:32,761 INFO L895 garLoopResultBuilder]: At program point L833-2(lines 829 840) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,761 INFO L899 garLoopResultBuilder]: For program point L928-1(line 928) no Hoare annotation was computed. [2022-10-17 10:21:32,761 INFO L895 garLoopResultBuilder]: At program point L726(lines 721 728) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,761 INFO L895 garLoopResultBuilder]: At program point L276(line 276) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,761 INFO L899 garLoopResultBuilder]: For program point L276-1(line 276) no Hoare annotation was computed. [2022-10-17 10:21:32,762 INFO L895 garLoopResultBuilder]: At program point L268(lines 263 270) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,762 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,762 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 950) no Hoare annotation was computed. [2022-10-17 10:21:32,762 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-10-17 10:21:32,762 INFO L895 garLoopResultBuilder]: At program point L249-1(lines 230 254) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse3 .cse1 .cse2) .cse4)) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse1 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) .cse4)))) [2022-10-17 10:21:32,762 INFO L895 garLoopResultBuilder]: At program point L278(lines 271 281) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-10-17 10:21:32,763 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 183 189) no Hoare annotation was computed. [2022-10-17 10:21:32,763 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 172 195) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-10-17 10:21:32,763 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 172 195) no Hoare annotation was computed. [2022-10-17 10:21:32,763 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 725) no Hoare annotation was computed. [2022-10-17 10:21:32,763 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse4 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse1) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse5 .cse6 .cse3 .cse4 .cse7) .cse8)) (or .cse2 .cse1 .cse9 .cse8) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse10 .cse4 .cse7) .cse1 .cse9 .cse8 (and .cse5 .cse6 .cse10 .cse4 .cse7))))) [2022-10-17 10:21:32,763 INFO L902 garLoopResultBuilder]: At program point L799(lines 792 801) the Hoare annotation is: true [2022-10-17 10:21:32,764 INFO L895 garLoopResultBuilder]: At program point L151(lines 102 152) the Hoare annotation is: false [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point L812(lines 812 819) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point L812-2(lines 812 819) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point L123(lines 123 129) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L899 garLoopResultBuilder]: For program point L123-1(lines 123 129) no Hoare annotation was computed. [2022-10-17 10:21:32,764 INFO L902 garLoopResultBuilder]: At program point L821(lines 802 824) the Hoare annotation is: true [2022-10-17 10:21:32,764 INFO L895 garLoopResultBuilder]: At program point L148(lines 103 150) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-10-17 10:21:32,765 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-10-17 10:21:32,765 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:21:32,765 INFO L895 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-10-17 10:21:32,765 INFO L895 garLoopResultBuilder]: At program point L789(lines 785 791) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2022-10-17 10:21:32,765 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:21:32,765 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 145) no Hoare annotation was computed. [2022-10-17 10:21:32,765 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:21:32,766 INFO L895 garLoopResultBuilder]: At program point L141-2(lines 133 146) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-10-17 10:21:32,766 INFO L899 garLoopResultBuilder]: For program point L104(lines 103 150) no Hoare annotation was computed. [2022-10-17 10:21:32,766 INFO L899 garLoopResultBuilder]: For program point L133(lines 133 146) no Hoare annotation was computed. [2022-10-17 10:21:32,766 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-10-17 10:21:32,769 INFO L902 garLoopResultBuilder]: At program point L154(lines 93 158) the Hoare annotation is: true [2022-10-17 10:21:32,769 INFO L899 garLoopResultBuilder]: For program point L113(lines 113 119) no Hoare annotation was computed. [2022-10-17 10:21:32,769 INFO L899 garLoopResultBuilder]: For program point L113-1(lines 113 119) no Hoare annotation was computed. [2022-10-17 10:21:32,770 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 109) no Hoare annotation was computed. [2022-10-17 10:21:32,770 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:21:32,770 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 204 228) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-10-17 10:21:32,770 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-10-17 10:21:32,771 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 204 228) no Hoare annotation was computed. [2022-10-17 10:21:32,771 INFO L895 garLoopResultBuilder]: At program point L915(lines 906 919) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (<= ~waterLevel~0 1))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 .cse2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2)))) [2022-10-17 10:21:32,771 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 204 228) no Hoare annotation was computed. [2022-10-17 10:21:32,771 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)))) [2022-10-17 10:21:32,773 INFO L895 garLoopResultBuilder]: At program point L342(lines 327 345) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0) .cse2 (<= 2 ~waterLevel~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))))) [2022-10-17 10:21:32,773 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 220) no Hoare annotation was computed. [2022-10-17 10:21:32,773 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 225) no Hoare annotation was computed. [2022-10-17 10:21:32,774 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 340) no Hoare annotation was computed. [2022-10-17 10:21:32,774 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 916) no Hoare annotation was computed. [2022-10-17 10:21:32,774 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 336 340) no Hoare annotation was computed. [2022-10-17 10:21:32,774 INFO L895 garLoopResultBuilder]: At program point L260(lines 255 262) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0) (<= 2 ~waterLevel~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))))) [2022-10-17 10:21:32,774 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 841 852) no Hoare annotation was computed. [2022-10-17 10:21:32,775 INFO L899 garLoopResultBuilder]: For program point L845-1(lines 841 852) no Hoare annotation was computed. [2022-10-17 10:21:32,775 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 841 852) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-10-17 10:21:32,778 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:21:32,780 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:21:32,825 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:21:32 BoogieIcfgContainer [2022-10-17 10:21:32,826 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:21:32,826 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:21:32,826 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:21:32,826 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:21:32,827 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:21:19" (3/4) ... [2022-10-17 10:21:32,830 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:21:32,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:21:32,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:21:32,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-10-17 10:21:32,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:21:32,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:21:32,837 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:21:32,837 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:21:32,846 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-10-17 10:21:32,847 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:21:32,848 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:21:32,848 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:21:32,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:21:32,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:21:32,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:21:32,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-10-17 10:21:32,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-10-17 10:21:32,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-10-17 10:21:32,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,877 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) [2022-10-17 10:21:32,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) && (((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) [2022-10-17 10:21:32,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) [2022-10-17 10:21:32,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && !(\result == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2)) || (((((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && \result == 0)) [2022-10-17 10:21:32,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) [2022-10-17 10:21:32,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:21:32,920 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:21:32,921 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:21:32,921 INFO L158 Benchmark]: Toolchain (without parser) took 15141.93ms. Allocated memory was 96.5MB in the beginning and 167.8MB in the end (delta: 71.3MB). Free memory was 64.3MB in the beginning and 62.1MB in the end (delta: 2.2MB). Peak memory consumption was 71.8MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,922 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 96.5MB. Free memory was 49.7MB in the beginning and 49.7MB in the end (delta: 27.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:21:32,922 INFO L158 Benchmark]: CACSL2BoogieTranslator took 671.89ms. Allocated memory was 96.5MB in the beginning and 125.8MB in the end (delta: 29.4MB). Free memory was 64.1MB in the beginning and 92.9MB in the end (delta: -28.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,923 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.66ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 90.4MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,923 INFO L158 Benchmark]: Boogie Preprocessor took 65.09ms. Allocated memory is still 125.8MB. Free memory was 90.4MB in the beginning and 88.7MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:21:32,924 INFO L158 Benchmark]: RCFGBuilder took 809.72ms. Allocated memory is still 125.8MB. Free memory was 88.7MB in the beginning and 70.3MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,924 INFO L158 Benchmark]: TraceAbstraction took 13407.63ms. Allocated memory was 125.8MB in the beginning and 167.8MB in the end (delta: 41.9MB). Free memory was 69.8MB in the beginning and 67.4MB in the end (delta: 2.4MB). Peak memory consumption was 70.9MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,926 INFO L158 Benchmark]: Witness Printer took 94.71ms. Allocated memory is still 167.8MB. Free memory was 67.4MB in the beginning and 62.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-10-17 10:21:32,928 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 96.5MB. Free memory was 49.7MB in the beginning and 49.7MB in the end (delta: 27.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 671.89ms. Allocated memory was 96.5MB in the beginning and 125.8MB in the end (delta: 29.4MB). Free memory was 64.1MB in the beginning and 92.9MB in the end (delta: -28.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.66ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 90.4MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.09ms. Allocated memory is still 125.8MB. Free memory was 90.4MB in the beginning and 88.7MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 809.72ms. Allocated memory is still 125.8MB. Free memory was 88.7MB in the beginning and 70.3MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13407.63ms. Allocated memory was 125.8MB in the beginning and 167.8MB in the end (delta: 41.9MB). Free memory was 69.8MB in the beginning and 67.4MB in the end (delta: 2.4MB). Peak memory consumption was 70.9MB. Max. memory is 16.1GB. * Witness Printer took 94.71ms. Allocated memory is still 167.8MB. Free memory was 67.4MB in the beginning and 62.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 725]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2372 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2341 mSDsluCounter, 4271 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2995 mSDsCounter, 865 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2548 IncrementalHoareTripleChecker+Invalid, 3413 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 865 mSolverCounterUnsat, 1276 mSDtfsCounter, 2548 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 404 GetRequests, 249 SyntacticMatches, 7 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1311 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=299occurred in iteration=9, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 65 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1136 PreInvPairs, 1387 NumberOfFragments, 1402 HoareAnnotationTreeSize, 1136 FomulaSimplifications, 120 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 12445 FormulaSimplificationTreeSizeReductionInter, 4.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 622 NumberOfCodeBlocks, 622 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 691 ConstructedInterpolants, 0 QuantifiedInterpolants, 1361 SizeOfPredicates, 4 NumberOfNonLiveVariables, 445 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 61/81 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 792]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) && (((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && !(\result == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 327]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2)) || (((((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && \result == 0)) - InvariantResult [Line: 103]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 230]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 741]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 731]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-10-17 10:21:33,012 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c44bc82d-a279-440c-b9ba-635535369ec1/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE