./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 21:08:47,231 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 21:08:47,234 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 21:08:47,267 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 21:08:47,267 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 21:08:47,269 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 21:08:47,270 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 21:08:47,272 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 21:08:47,274 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 21:08:47,275 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 21:08:47,276 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 21:08:47,278 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 21:08:47,278 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 21:08:47,279 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 21:08:47,280 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 21:08:47,282 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 21:08:47,283 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 21:08:47,284 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 21:08:47,286 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 21:08:47,287 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 21:08:47,289 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 21:08:47,290 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 21:08:47,292 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 21:08:47,293 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 21:08:47,296 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 21:08:47,297 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 21:08:47,297 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 21:08:47,298 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 21:08:47,299 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 21:08:47,300 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 21:08:47,300 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 21:08:47,301 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 21:08:47,302 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 21:08:47,303 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 21:08:47,304 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 21:08:47,304 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 21:08:47,305 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 21:08:47,305 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 21:08:47,306 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 21:08:47,307 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 21:08:47,307 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 21:08:47,309 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 21:08:47,330 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 21:08:47,331 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 21:08:47,331 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 21:08:47,331 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 21:08:47,332 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 21:08:47,333 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 21:08:47,333 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 21:08:47,334 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 21:08:47,334 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 21:08:47,334 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 21:08:47,334 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 21:08:47,334 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 21:08:47,335 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 21:08:47,335 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 21:08:47,335 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 21:08:47,335 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 21:08:47,335 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 21:08:47,336 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 21:08:47,336 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 21:08:47,336 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 21:08:47,336 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 21:08:47,337 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 21:08:47,337 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 21:08:47,337 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 21:08:47,337 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:08:47,337 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 21:08:47,338 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 21:08:47,338 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 21:08:47,338 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 21:08:47,338 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 21:08:47,339 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 21:08:47,339 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 21:08:47,339 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 21:08:47,339 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a [2022-11-02 21:08:47,643 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 21:08:47,683 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 21:08:47,686 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 21:08:47,687 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 21:08:47,688 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 21:08:47,689 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2022-11-02 21:08:47,768 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/data/6e2abd181/6bb0d2edcf854936884ded13e9a44808/FLAG0a9e02877 [2022-11-02 21:08:48,396 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 21:08:48,396 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2022-11-02 21:08:48,429 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/data/6e2abd181/6bb0d2edcf854936884ded13e9a44808/FLAG0a9e02877 [2022-11-02 21:08:48,669 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/data/6e2abd181/6bb0d2edcf854936884ded13e9a44808 [2022-11-02 21:08:48,672 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 21:08:48,673 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 21:08:48,675 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 21:08:48,676 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 21:08:48,685 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 21:08:48,687 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:08:48" (1/1) ... [2022-11-02 21:08:48,689 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b422dc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:48, skipping insertion in model container [2022-11-02 21:08:48,690 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:08:48" (1/1) ... [2022-11-02 21:08:48,698 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 21:08:48,743 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 21:08:49,039 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2022-11-02 21:08:49,043 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:08:49,053 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 21:08:49,181 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2022-11-02 21:08:49,190 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:08:49,213 INFO L208 MainTranslator]: Completed translation [2022-11-02 21:08:49,215 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49 WrapperNode [2022-11-02 21:08:49,215 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 21:08:49,216 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 21:08:49,217 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 21:08:49,217 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 21:08:49,225 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,250 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,285 INFO L138 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 271 [2022-11-02 21:08:49,286 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 21:08:49,286 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 21:08:49,287 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 21:08:49,287 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 21:08:49,296 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,296 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,298 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,298 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,303 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,308 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,310 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,311 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,314 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 21:08:49,315 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 21:08:49,315 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 21:08:49,315 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 21:08:49,335 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (1/1) ... [2022-11-02 21:08:49,350 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:08:49,362 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:08:49,374 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 21:08:49,376 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 21:08:49,419 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 21:08:49,419 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 21:08:49,419 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 21:08:49,420 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 21:08:49,421 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 21:08:49,421 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-02 21:08:49,421 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-02 21:08:49,423 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 21:08:49,424 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 21:08:49,428 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:08:49,428 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:08:49,428 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 21:08:49,429 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 21:08:49,429 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:08:49,429 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:08:49,429 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-02 21:08:49,429 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-02 21:08:49,429 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 21:08:49,429 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 21:08:49,430 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 21:08:49,430 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 21:08:49,430 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 21:08:49,430 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 21:08:49,430 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 21:08:49,517 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 21:08:49,520 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 21:08:49,957 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 21:08:49,966 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 21:08:49,970 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 21:08:49,972 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:08:49 BoogieIcfgContainer [2022-11-02 21:08:49,985 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 21:08:49,988 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 21:08:49,988 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 21:08:49,995 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 21:08:49,995 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 09:08:48" (1/3) ... [2022-11-02 21:08:49,996 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d58e601 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:08:49, skipping insertion in model container [2022-11-02 21:08:49,996 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:08:49" (2/3) ... [2022-11-02 21:08:49,997 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d58e601 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:08:49, skipping insertion in model container [2022-11-02 21:08:49,997 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:08:49" (3/3) ... [2022-11-02 21:08:49,999 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product62.cil.c [2022-11-02 21:08:50,022 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 21:08:50,022 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 21:08:50,086 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 21:08:50,093 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5e42e627, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 21:08:50,093 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 21:08:50,098 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-02 21:08:50,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-02 21:08:50,109 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:50,110 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:50,111 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:50,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:50,117 INFO L85 PathProgramCache]: Analyzing trace with hash 1689838058, now seen corresponding path program 1 times [2022-11-02 21:08:50,128 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:50,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1806454005] [2022-11-02 21:08:50,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:50,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:50,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:50,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:08:50,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:50,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:50,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:50,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1806454005] [2022-11-02 21:08:50,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1806454005] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:50,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:50,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 21:08:50,395 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495939443] [2022-11-02 21:08:50,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:50,402 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 21:08:50,402 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:50,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 21:08:50,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:08:50,445 INFO L87 Difference]: Start difference. First operand has 109 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:50,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:50,506 INFO L93 Difference]: Finished difference Result 210 states and 283 transitions. [2022-11-02 21:08:50,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 21:08:50,509 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-02 21:08:50,509 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:50,524 INFO L225 Difference]: With dead ends: 210 [2022-11-02 21:08:50,524 INFO L226 Difference]: Without dead ends: 100 [2022-11-02 21:08:50,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:08:50,532 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:50,533 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:08:50,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-02 21:08:50,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-11-02 21:08:50,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 72 states have (on average 1.3055555555555556) internal successors, (94), 81 states have internal predecessors, (94), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-02 21:08:50,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2022-11-02 21:08:50,598 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 23 [2022-11-02 21:08:50,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:50,599 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2022-11-02 21:08:50,599 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:50,599 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2022-11-02 21:08:50,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-02 21:08:50,602 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:50,602 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:50,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 21:08:50,603 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:50,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:50,604 INFO L85 PathProgramCache]: Analyzing trace with hash 1112714422, now seen corresponding path program 1 times [2022-11-02 21:08:50,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:50,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812431976] [2022-11-02 21:08:50,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:50,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:50,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:50,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 21:08:50,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:50,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:50,853 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:50,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812431976] [2022-11-02 21:08:50,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [812431976] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:50,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:50,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 21:08:50,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710793359] [2022-11-02 21:08:50,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:50,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:08:50,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:50,858 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:08:50,859 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:08:50,860 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:50,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:50,901 INFO L93 Difference]: Finished difference Result 165 states and 213 transitions. [2022-11-02 21:08:50,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:08:50,903 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-02 21:08:50,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:50,907 INFO L225 Difference]: With dead ends: 165 [2022-11-02 21:08:50,907 INFO L226 Difference]: Without dead ends: 91 [2022-11-02 21:08:50,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:08:50,910 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 13 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:50,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 215 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:08:50,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-02 21:08:50,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-11-02 21:08:50,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 75 states have internal predecessors, (87), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-02 21:08:50,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2022-11-02 21:08:50,925 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 24 [2022-11-02 21:08:50,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:50,926 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2022-11-02 21:08:50,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:50,927 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-11-02 21:08:50,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-02 21:08:50,928 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:50,928 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:50,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 21:08:50,929 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:50,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:50,930 INFO L85 PathProgramCache]: Analyzing trace with hash -1697557311, now seen corresponding path program 1 times [2022-11-02 21:08:50,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:50,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730697278] [2022-11-02 21:08:50,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:50,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:50,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:51,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:51,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:51,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730697278] [2022-11-02 21:08:51,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730697278] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:51,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:51,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:08:51,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800748826] [2022-11-02 21:08:51,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:51,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:08:51,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:51,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:08:51,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:08:51,075 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:51,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:51,188 INFO L93 Difference]: Finished difference Result 175 states and 228 transitions. [2022-11-02 21:08:51,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 21:08:51,189 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-11-02 21:08:51,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:51,194 INFO L225 Difference]: With dead ends: 175 [2022-11-02 21:08:51,194 INFO L226 Difference]: Without dead ends: 91 [2022-11-02 21:08:51,199 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:08:51,203 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 142 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:51,206 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 298 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:08:51,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-02 21:08:51,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-11-02 21:08:51,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 75 states have internal predecessors, (86), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-02 21:08:51,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 116 transitions. [2022-11-02 21:08:51,240 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 116 transitions. Word has length 29 [2022-11-02 21:08:51,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:51,241 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 116 transitions. [2022-11-02 21:08:51,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:08:51,242 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 116 transitions. [2022-11-02 21:08:51,244 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-02 21:08:51,247 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:51,248 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:51,248 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 21:08:51,249 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:51,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:51,250 INFO L85 PathProgramCache]: Analyzing trace with hash -189961352, now seen corresponding path program 1 times [2022-11-02 21:08:51,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:51,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208938492] [2022-11-02 21:08:51,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:51,252 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:51,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:51,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:51,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:51,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 21:08:51,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:51,577 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:51,577 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:51,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208938492] [2022-11-02 21:08:51,578 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208938492] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:51,578 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:51,578 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:08:51,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756833809] [2022-11-02 21:08:51,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:51,579 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:08:51,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:51,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:08:51,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:08:51,580 INFO L87 Difference]: Start difference. First operand 91 states and 116 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:08:51,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:51,886 INFO L93 Difference]: Finished difference Result 261 states and 330 transitions. [2022-11-02 21:08:51,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:08:51,887 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2022-11-02 21:08:51,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:51,893 INFO L225 Difference]: With dead ends: 261 [2022-11-02 21:08:51,893 INFO L226 Difference]: Without dead ends: 177 [2022-11-02 21:08:51,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:08:51,905 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 198 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:51,906 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 316 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:08:51,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2022-11-02 21:08:51,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 171. [2022-11-02 21:08:51,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 125 states have (on average 1.232) internal successors, (154), 134 states have internal predecessors, (154), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-11-02 21:08:51,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 205 transitions. [2022-11-02 21:08:51,954 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 205 transitions. Word has length 44 [2022-11-02 21:08:51,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:51,955 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 205 transitions. [2022-11-02 21:08:51,955 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:08:51,955 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 205 transitions. [2022-11-02 21:08:51,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-02 21:08:51,956 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:51,956 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:51,957 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 21:08:51,957 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:51,957 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:51,957 INFO L85 PathProgramCache]: Analyzing trace with hash 963666416, now seen corresponding path program 1 times [2022-11-02 21:08:51,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:51,958 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230306845] [2022-11-02 21:08:51,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:51,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:51,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:52,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:52,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:52,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-02 21:08:52,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:52,278 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:52,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230306845] [2022-11-02 21:08:52,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230306845] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:52,279 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:52,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:08:52,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170848062] [2022-11-02 21:08:52,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:52,282 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:08:52,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:52,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:08:52,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:08:52,284 INFO L87 Difference]: Start difference. First operand 171 states and 205 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:08:52,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:52,593 INFO L93 Difference]: Finished difference Result 187 states and 221 transitions. [2022-11-02 21:08:52,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-02 21:08:52,594 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-02 21:08:52,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:52,596 INFO L225 Difference]: With dead ends: 187 [2022-11-02 21:08:52,596 INFO L226 Difference]: Without dead ends: 185 [2022-11-02 21:08:52,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-02 21:08:52,600 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 144 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:52,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 425 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:08:52,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-11-02 21:08:52,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 171. [2022-11-02 21:08:52,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 125 states have (on average 1.216) internal successors, (152), 134 states have internal predecessors, (152), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-11-02 21:08:52,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 203 transitions. [2022-11-02 21:08:52,626 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 203 transitions. Word has length 50 [2022-11-02 21:08:52,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:52,627 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 203 transitions. [2022-11-02 21:08:52,627 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:08:52,627 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 203 transitions. [2022-11-02 21:08:52,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:08:52,629 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:52,629 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:52,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 21:08:52,630 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:52,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:52,630 INFO L85 PathProgramCache]: Analyzing trace with hash -158889570, now seen corresponding path program 1 times [2022-11-02 21:08:52,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:52,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288811215] [2022-11-02 21:08:52,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:52,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:52,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:52,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:52,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:52,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:52,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-02 21:08:52,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:52,781 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:08:52,781 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:52,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288811215] [2022-11-02 21:08:52,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288811215] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:52,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:52,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:08:52,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121412816] [2022-11-02 21:08:52,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:52,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:08:52,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:52,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:08:52,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:08:52,783 INFO L87 Difference]: Start difference. First operand 171 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:08:52,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:52,999 INFO L93 Difference]: Finished difference Result 345 states and 418 transitions. [2022-11-02 21:08:52,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:08:52,999 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-02 21:08:53,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:53,001 INFO L225 Difference]: With dead ends: 345 [2022-11-02 21:08:53,001 INFO L226 Difference]: Without dead ends: 181 [2022-11-02 21:08:53,002 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 21:08:53,003 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 76 mSDsluCounter, 302 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 407 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:53,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 407 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:08:53,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2022-11-02 21:08:53,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 174. [2022-11-02 21:08:53,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2109375) internal successors, (155), 137 states have internal predecessors, (155), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-11-02 21:08:53,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 206 transitions. [2022-11-02 21:08:53,020 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 206 transitions. Word has length 60 [2022-11-02 21:08:53,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:53,021 INFO L495 AbstractCegarLoop]: Abstraction has 174 states and 206 transitions. [2022-11-02 21:08:53,021 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:08:53,021 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 206 transitions. [2022-11-02 21:08:53,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:08:53,022 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:53,023 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:53,023 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 21:08:53,023 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:53,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:53,036 INFO L85 PathProgramCache]: Analyzing trace with hash 115870044, now seen corresponding path program 1 times [2022-11-02 21:08:53,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:53,036 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627931610] [2022-11-02 21:08:53,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:53,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:53,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:53,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:53,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:53,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:53,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-02 21:08:53,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,191 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:08:53,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:53,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627931610] [2022-11-02 21:08:53,192 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627931610] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:53,192 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:53,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:08:53,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947632020] [2022-11-02 21:08:53,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:53,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:08:53,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:53,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:08:53,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:08:53,194 INFO L87 Difference]: Start difference. First operand 174 states and 206 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:08:53,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:53,374 INFO L93 Difference]: Finished difference Result 351 states and 424 transitions. [2022-11-02 21:08:53,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 21:08:53,374 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-02 21:08:53,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:53,383 INFO L225 Difference]: With dead ends: 351 [2022-11-02 21:08:53,383 INFO L226 Difference]: Without dead ends: 184 [2022-11-02 21:08:53,384 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:08:53,385 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 77 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:53,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 321 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:08:53,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-11-02 21:08:53,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 176. [2022-11-02 21:08:53,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 130 states have (on average 1.2076923076923076) internal successors, (157), 139 states have internal predecessors, (157), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-11-02 21:08:53,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 208 transitions. [2022-11-02 21:08:53,419 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 208 transitions. Word has length 60 [2022-11-02 21:08:53,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:53,419 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 208 transitions. [2022-11-02 21:08:53,419 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:08:53,420 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 208 transitions. [2022-11-02 21:08:53,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:08:53,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:53,424 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:53,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 21:08:53,425 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:53,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:53,426 INFO L85 PathProgramCache]: Analyzing trace with hash -2128113254, now seen corresponding path program 1 times [2022-11-02 21:08:53,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:53,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938652268] [2022-11-02 21:08:53,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:53,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:53,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:53,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:53,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:53,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:53,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-02 21:08:53,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:53,596 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:08:53,596 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:53,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938652268] [2022-11-02 21:08:53,596 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938652268] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:53,597 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:53,597 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:08:53,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616046731] [2022-11-02 21:08:53,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:53,598 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:08:53,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:53,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:08:53,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:08:53,599 INFO L87 Difference]: Start difference. First operand 176 states and 208 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:08:53,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:53,859 INFO L93 Difference]: Finished difference Result 472 states and 588 transitions. [2022-11-02 21:08:53,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:08:53,860 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2022-11-02 21:08:53,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:53,863 INFO L225 Difference]: With dead ends: 472 [2022-11-02 21:08:53,863 INFO L226 Difference]: Without dead ends: 303 [2022-11-02 21:08:53,864 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:08:53,865 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 218 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:53,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 343 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:08:53,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2022-11-02 21:08:53,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 301. [2022-11-02 21:08:53,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 223 states have (on average 1.201793721973094) internal successors, (268), 236 states have internal predecessors, (268), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2022-11-02 21:08:53,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 365 transitions. [2022-11-02 21:08:53,912 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 365 transitions. Word has length 60 [2022-11-02 21:08:53,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:53,912 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 365 transitions. [2022-11-02 21:08:53,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:08:53,912 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 365 transitions. [2022-11-02 21:08:53,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-02 21:08:53,914 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:53,914 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:53,915 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 21:08:53,915 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:53,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:53,915 INFO L85 PathProgramCache]: Analyzing trace with hash -183762560, now seen corresponding path program 1 times [2022-11-02 21:08:53,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:53,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709529345] [2022-11-02 21:08:53,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:53,916 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:53,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:08:54,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:08:54,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:54,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:54,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:54,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-02 21:08:54,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:54,138 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:08:54,139 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:54,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709529345] [2022-11-02 21:08:54,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709529345] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:54,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:08:54,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 21:08:54,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309971259] [2022-11-02 21:08:54,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:54,140 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:08:54,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:54,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:08:54,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:08:54,141 INFO L87 Difference]: Start difference. First operand 301 states and 365 transitions. Second operand has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 21:08:54,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:54,897 INFO L93 Difference]: Finished difference Result 959 states and 1199 transitions. [2022-11-02 21:08:54,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-02 21:08:54,898 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2022-11-02 21:08:54,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:54,904 INFO L225 Difference]: With dead ends: 959 [2022-11-02 21:08:54,904 INFO L226 Difference]: Without dead ends: 665 [2022-11-02 21:08:54,928 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 128 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2022-11-02 21:08:54,930 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 352 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 527 mSolverCounterSat, 169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 696 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 169 IncrementalHoareTripleChecker+Valid, 527 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:54,931 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [359 Valid, 373 Invalid, 696 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [169 Valid, 527 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-02 21:08:54,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-11-02 21:08:54,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 637. [2022-11-02 21:08:54,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 637 states, 466 states have (on average 1.1759656652360515) internal successors, (548), 497 states have internal predecessors, (548), 88 states have call successors, (88), 70 states have call predecessors, (88), 82 states have return successors, (137), 90 states have call predecessors, (137), 88 states have call successors, (137) [2022-11-02 21:08:54,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 637 states to 637 states and 773 transitions. [2022-11-02 21:08:54,996 INFO L78 Accepts]: Start accepts. Automaton has 637 states and 773 transitions. Word has length 64 [2022-11-02 21:08:54,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:54,997 INFO L495 AbstractCegarLoop]: Abstraction has 637 states and 773 transitions. [2022-11-02 21:08:54,997 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 21:08:54,997 INFO L276 IsEmpty]: Start isEmpty. Operand 637 states and 773 transitions. [2022-11-02 21:08:54,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-02 21:08:54,999 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:54,999 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:54,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-02 21:08:54,999 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:55,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:55,000 INFO L85 PathProgramCache]: Analyzing trace with hash 2085614340, now seen corresponding path program 1 times [2022-11-02 21:08:55,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:55,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878161248] [2022-11-02 21:08:55,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:55,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:55,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:08:55,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-02 21:08:55,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:08:55,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:55,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:55,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:55,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-11-02 21:08:55,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,436 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:08:55,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:55,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878161248] [2022-11-02 21:08:55,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [878161248] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:08:55,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1547032641] [2022-11-02 21:08:55,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:55,437 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:08:55,437 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:08:55,442 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:08:55,458 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 21:08:55,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:55,558 INFO L263 TraceCheckSpWp]: Trace formula consists of 395 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:08:55,564 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:08:55,895 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:08:55,903 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:08:55,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1547032641] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:55,904 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:08:55,904 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-11-02 21:08:55,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994613409] [2022-11-02 21:08:55,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:55,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:08:55,905 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:55,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:08:55,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:08:55,906 INFO L87 Difference]: Start difference. First operand 637 states and 773 transitions. Second operand has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-02 21:08:56,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:56,147 INFO L93 Difference]: Finished difference Result 1244 states and 1516 transitions. [2022-11-02 21:08:56,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:08:56,148 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 68 [2022-11-02 21:08:56,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:56,152 INFO L225 Difference]: With dead ends: 1244 [2022-11-02 21:08:56,152 INFO L226 Difference]: Without dead ends: 614 [2022-11-02 21:08:56,154 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 74 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:08:56,155 INFO L413 NwaCegarLoop]: 212 mSDtfsCounter, 78 mSDsluCounter, 671 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 883 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:56,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 883 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:08:56,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2022-11-02 21:08:56,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 612. [2022-11-02 21:08:56,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 612 states, 447 states have (on average 1.1633109619686801) internal successors, (520), 477 states have internal predecessors, (520), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (122), 86 states have call predecessors, (122), 86 states have call successors, (122) [2022-11-02 21:08:56,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 612 states to 612 states and 728 transitions. [2022-11-02 21:08:56,234 INFO L78 Accepts]: Start accepts. Automaton has 612 states and 728 transitions. Word has length 68 [2022-11-02 21:08:56,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:56,235 INFO L495 AbstractCegarLoop]: Abstraction has 612 states and 728 transitions. [2022-11-02 21:08:56,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.625) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-02 21:08:56,236 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 728 transitions. [2022-11-02 21:08:56,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2022-11-02 21:08:56,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:08:56,244 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:08:56,288 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 21:08:56,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-02 21:08:56,459 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:08:56,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:08:56,459 INFO L85 PathProgramCache]: Analyzing trace with hash 971206854, now seen corresponding path program 1 times [2022-11-02 21:08:56,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:08:56,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [365004333] [2022-11-02 21:08:56,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:56,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:08:56,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:08:56,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:08:56,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 21:08:56,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:56,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:08:56,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:56,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-02 21:08:56,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-02 21:08:56,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-11-02 21:08:56,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:08:56,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2022-11-02 21:08:56,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-02 21:08:56,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:08:56,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-11-02 21:08:56,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,863 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-02 21:08:56,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:08:56,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [365004333] [2022-11-02 21:08:56,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [365004333] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:08:56,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1916779893] [2022-11-02 21:08:56,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:08:56,864 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:08:56,864 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:08:56,867 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:08:56,894 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 21:08:56,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:08:56,996 INFO L263 TraceCheckSpWp]: Trace formula consists of 527 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:08:57,000 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:08:57,160 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-02 21:08:57,166 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:08:57,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1916779893] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:08:57,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:08:57,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-11-02 21:08:57,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993508592] [2022-11-02 21:08:57,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:08:57,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:08:57,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:08:57,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:08:57,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:08:57,169 INFO L87 Difference]: Start difference. First operand 612 states and 728 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-02 21:08:57,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:08:57,350 INFO L93 Difference]: Finished difference Result 1045 states and 1259 transitions. [2022-11-02 21:08:57,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:08:57,350 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2022-11-02 21:08:57,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:08:57,352 INFO L225 Difference]: With dead ends: 1045 [2022-11-02 21:08:57,352 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 21:08:57,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=399, Unknown=0, NotChecked=0, Total=462 [2022-11-02 21:08:57,355 INFO L413 NwaCegarLoop]: 200 mSDtfsCounter, 74 mSDsluCounter, 796 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 996 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:08:57,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 996 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:08:57,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 21:08:57,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 21:08:57,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 21:08:57,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 21:08:57,357 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2022-11-02 21:08:57,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:08:57,357 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 21:08:57,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-02 21:08:57,357 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 21:08:57,357 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 21:08:57,360 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 21:08:57,397 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 21:08:57,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:08:57,584 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 21:09:01,269 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 199 206) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~pumpRunning~0)| 0) (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,270 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2022-11-02 21:09:01,270 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 199 206) no Hoare annotation was computed. [2022-11-02 21:09:01,270 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2022-11-02 21:09:01,270 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2022-11-02 21:09:01,270 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2022-11-02 21:09:01,270 INFO L895 garLoopResultBuilder]: At program point L979(lines 974 982) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-02 21:09:01,271 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-02 21:09:01,271 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-02 21:09:01,271 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2022-11-02 21:09:01,271 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2022-11-02 21:09:01,271 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 123 147) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2022-11-02 21:09:01,272 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not .cse0) .cse4 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse4 .cse1 .cse2 .cse3))) [2022-11-02 21:09:01,272 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2022-11-02 21:09:01,272 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2022-11-02 21:09:01,272 INFO L895 garLoopResultBuilder]: At program point L297(lines 282 300) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-02 21:09:01,273 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2022-11-02 21:09:01,273 INFO L899 garLoopResultBuilder]: For program point L911-1(lines 907 918) no Hoare annotation was computed. [2022-11-02 21:09:01,273 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 907 918) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= |old(~methaneLevelCritical~0)| 0)) (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0)) (not (<= 0 |old(~methaneLevelCritical~0)|)) .cse0) (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse0))) [2022-11-02 21:09:01,273 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 907 918) no Hoare annotation was computed. [2022-11-02 21:09:01,273 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 785 814) no Hoare annotation was computed. [2022-11-02 21:09:01,274 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2022-11-02 21:09:01,274 INFO L902 garLoopResultBuilder]: At program point L799-1(lines 799 803) the Hoare annotation is: true [2022-11-02 21:09:01,274 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 785 814) the Hoare annotation is: true [2022-11-02 21:09:01,274 INFO L899 garLoopResultBuilder]: For program point L796(line 796) no Hoare annotation was computed. [2022-11-02 21:09:01,274 INFO L902 garLoopResultBuilder]: At program point L795-2(lines 795 809) the Hoare annotation is: true [2022-11-02 21:09:01,274 INFO L902 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: true [2022-11-02 21:09:01,275 INFO L899 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2022-11-02 21:09:01,275 INFO L902 garLoopResultBuilder]: At program point L810(lines 785 814) the Hoare annotation is: true [2022-11-02 21:09:01,275 INFO L899 garLoopResultBuilder]: For program point L806(line 806) no Hoare annotation was computed. [2022-11-02 21:09:01,275 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 919 927) the Hoare annotation is: true [2022-11-02 21:09:01,275 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 919 927) no Hoare annotation was computed. [2022-11-02 21:09:01,275 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 919 927) no Hoare annotation was computed. [2022-11-02 21:09:01,276 INFO L899 garLoopResultBuilder]: For program point L993(lines 993 1006) no Hoare annotation was computed. [2022-11-02 21:09:01,276 INFO L895 garLoopResultBuilder]: At program point L993-1(lines 985 1009) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse1 .cse3) .cse4) (let ((.cse5 (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 1))) (.cse6 (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse5 .cse3 .cse6) (and .cse0 .cse1 .cse5 .cse6) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse0 .cse5 .cse6) (and .cse2 .cse1 .cse5 .cse3 .cse6))))) [2022-11-02 21:09:01,276 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (<= 0 ~methaneLevelCritical~0)) .cse0) (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (not (<= 1 ~methaneLevelCritical~0)) .cse0))) [2022-11-02 21:09:01,276 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,276 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2022-11-02 21:09:01,277 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,277 INFO L895 garLoopResultBuilder]: At program point L168-1(lines 149 173) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1) (and .cse2 .cse3) (and .cse3 .cse0) (not (<= 0 ~methaneLevelCritical~0)) (and (<= 2 ~waterLevel~0) .cse1) .cse4)) (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse0) .cse4))) [2022-11-02 21:09:01,277 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2022-11-02 21:09:01,277 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2022-11-02 21:09:01,278 INFO L899 garLoopResultBuilder]: For program point L887(lines 887 891) no Hoare annotation was computed. [2022-11-02 21:09:01,278 INFO L899 garLoopResultBuilder]: For program point L1015(line 1015) no Hoare annotation was computed. [2022-11-02 21:09:01,278 INFO L895 garLoopResultBuilder]: At program point L887-2(lines 883 894) the Hoare annotation is: (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,278 INFO L895 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1) (and .cse2 .cse3) (and .cse3 .cse0) (not (<= 0 ~methaneLevelCritical~0)) (and (<= 2 ~waterLevel~0) .cse1) .cse4)) (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse0) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse0) .cse4))) [2022-11-02 21:09:01,279 INFO L895 garLoopResultBuilder]: At program point L223(lines 218 226) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0))) (or (not (<= 1 ~methaneLevelCritical~0)) (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2)) (or (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse2))) [2022-11-02 21:09:01,279 INFO L899 garLoopResultBuilder]: For program point L991-1(line 991) no Hoare annotation was computed. [2022-11-02 21:09:01,279 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2022-11-02 21:09:01,279 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2022-11-02 21:09:01,279 INFO L895 garLoopResultBuilder]: At program point L1016(lines 1011 1018) the Hoare annotation is: (or (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,279 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 88) the Hoare annotation is: (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0)) (= 0 ~systemActive~0)) [2022-11-02 21:09:01,280 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-11-02 21:09:01,280 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2022-11-02 21:09:01,280 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1015) no Hoare annotation was computed. [2022-11-02 21:09:01,280 INFO L899 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2022-11-02 21:09:01,280 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (<= 0 ~methaneLevelCritical~0)) .cse0))) [2022-11-02 21:09:01,281 INFO L899 garLoopResultBuilder]: For program point L353(lines 353 366) no Hoare annotation was computed. [2022-11-02 21:09:01,281 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 (<= 0 ~methaneLevelCritical~0) .cse2 .cse3))) [2022-11-02 21:09:01,281 INFO L902 garLoopResultBuilder]: At program point L374(lines 313 378) the Hoare annotation is: true [2022-11-02 21:09:01,281 INFO L902 garLoopResultBuilder]: At program point L853(lines 846 855) the Hoare annotation is: true [2022-11-02 21:09:01,281 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 339) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point L325(lines 325 329) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 873) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point L866-2(lines 866 873) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 21:09:01,282 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 21:09:01,283 INFO L895 garLoopResultBuilder]: At program point L371(lines 322 372) the Hoare annotation is: false [2022-11-02 21:09:01,283 INFO L902 garLoopResultBuilder]: At program point L875(lines 856 878) the Hoare annotation is: true [2022-11-02 21:09:01,283 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 21:09:01,283 INFO L895 garLoopResultBuilder]: At program point L413(lines 408 416) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,283 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 349) no Hoare annotation was computed. [2022-11-02 21:09:01,284 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2022-11-02 21:09:01,284 INFO L895 garLoopResultBuilder]: At program point L405(lines 401 407) the Hoare annotation is: (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,284 INFO L895 garLoopResultBuilder]: At program point L306(lines 301 308) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 0 ~methaneLevelCritical~0) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,284 INFO L895 garLoopResultBuilder]: At program point L368(lines 323 370) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 (<= 0 ~methaneLevelCritical~0) .cse2 .cse3))) [2022-11-02 21:09:01,284 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 (<= 0 ~methaneLevelCritical~0) .cse2 .cse3))) [2022-11-02 21:09:01,285 INFO L895 garLoopResultBuilder]: At program point L843(lines 839 845) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,285 INFO L895 garLoopResultBuilder]: At program point L398(lines 394 400) the Hoare annotation is: (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,285 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 365) no Hoare annotation was computed. [2022-11-02 21:09:01,285 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 353 366) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 0 ~methaneLevelCritical~0) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:09:01,285 INFO L899 garLoopResultBuilder]: For program point L324(lines 323 370) no Hoare annotation was computed. [2022-11-02 21:09:01,286 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 97 121) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2022-11-02 21:09:01,286 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-02 21:09:01,286 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2022-11-02 21:09:01,286 INFO L895 garLoopResultBuilder]: At program point L969(lines 960 973) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (= |old(~pumpRunning~0)| 0)) (.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not .cse5) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse4)))) [2022-11-02 21:09:01,286 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-02 21:09:01,287 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2022-11-02 21:09:01,287 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1) .cse2))) [2022-11-02 21:09:01,287 INFO L895 garLoopResultBuilder]: At program point L189-2(lines 182 198) the Hoare annotation is: (let ((.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (<= 2 ~waterLevel~0)) (.cse4 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) .cse0) (not .cse4) (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-11-02 21:09:01,287 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2022-11-02 21:09:01,287 INFO L895 garLoopResultBuilder]: At program point L278(lines 263 281) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (and .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not .cse4))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse4) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3) .cse4)))) [2022-11-02 21:09:01,288 INFO L895 garLoopResultBuilder]: At program point L179(lines 174 181) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (<= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (or (not .cse3) (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse3 .cse0 .cse1 .cse2))) [2022-11-02 21:09:01,288 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2022-11-02 21:09:01,288 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-11-02 21:09:01,288 INFO L899 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2022-11-02 21:09:01,288 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2022-11-02 21:09:01,289 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2022-11-02 21:09:01,289 INFO L899 garLoopResultBuilder]: For program point L964(lines 964 970) no Hoare annotation was computed. [2022-11-02 21:09:01,289 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 895 906) no Hoare annotation was computed. [2022-11-02 21:09:01,289 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 895 906) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2022-11-02 21:09:01,289 INFO L899 garLoopResultBuilder]: For program point L899-1(lines 895 906) no Hoare annotation was computed. [2022-11-02 21:09:01,290 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 207 217) the Hoare annotation is: true [2022-11-02 21:09:01,290 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2022-11-02 21:09:01,290 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 207 217) no Hoare annotation was computed. [2022-11-02 21:09:01,290 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2022-11-02 21:09:01,290 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2022-11-02 21:09:01,293 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:09:01,296 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 21:09:01,319 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 09:09:01 BoogieIcfgContainer [2022-11-02 21:09:01,320 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 21:09:01,320 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 21:09:01,320 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 21:09:01,321 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 21:09:01,321 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:08:49" (3/4) ... [2022-11-02 21:09:01,324 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 21:09:01,331 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 21:09:01,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 21:09:01,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 21:09:01,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 21:09:01,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-02 21:09:01,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 21:09:01,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:09:01,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 21:09:01,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:09:01,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-02 21:09:01,341 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-02 21:09:01,342 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 21:09:01,342 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 21:09:01,343 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 21:09:01,343 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 21:09:01,344 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:09:01,344 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:09:01,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 21:09:01,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-11-02 21:09:01,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((\result == 1 && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) && !(0 == systemActive)) [2022-11-02 21:09:01,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive [2022-11-02 21:09:01,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(0 <= methaneLevelCritical)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((1 <= tmp && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) [2022-11-02 21:09:01,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((((((2 <= waterLevel && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && 0 < tmp + 1) && tmp <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) [2022-11-02 21:09:01,374 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((\result == 1 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) && !(0 == systemActive) [2022-11-02 21:09:01,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,376 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \result == 1) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive)) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,376 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:09:01,376 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-11-02 21:09:01,410 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 21:09:01,410 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 21:09:01,411 INFO L158 Benchmark]: Toolchain (without parser) took 12737.78ms. Allocated memory was 134.2MB in the beginning and 222.3MB in the end (delta: 88.1MB). Free memory was 92.0MB in the beginning and 113.3MB in the end (delta: -21.3MB). Peak memory consumption was 66.6MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,412 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 134.2MB. Free memory was 110.2MB in the beginning and 110.1MB in the end (delta: 74.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:09:01,412 INFO L158 Benchmark]: CACSL2BoogieTranslator took 540.29ms. Allocated memory is still 134.2MB. Free memory was 91.8MB in the beginning and 99.3MB in the end (delta: -7.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,412 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.48ms. Allocated memory is still 134.2MB. Free memory was 99.3MB in the beginning and 96.4MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,413 INFO L158 Benchmark]: Boogie Preprocessor took 27.42ms. Allocated memory is still 134.2MB. Free memory was 96.4MB in the beginning and 94.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,413 INFO L158 Benchmark]: RCFGBuilder took 670.80ms. Allocated memory is still 134.2MB. Free memory was 94.7MB in the beginning and 74.7MB in the end (delta: 20.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,414 INFO L158 Benchmark]: TraceAbstraction took 11332.03ms. Allocated memory was 134.2MB in the beginning and 222.3MB in the end (delta: 88.1MB). Free memory was 74.3MB in the beginning and 119.6MB in the end (delta: -45.3MB). Peak memory consumption was 100.3MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,414 INFO L158 Benchmark]: Witness Printer took 90.11ms. Allocated memory is still 222.3MB. Free memory was 119.6MB in the beginning and 113.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 21:09:01,416 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 134.2MB. Free memory was 110.2MB in the beginning and 110.1MB in the end (delta: 74.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 540.29ms. Allocated memory is still 134.2MB. Free memory was 91.8MB in the beginning and 99.3MB in the end (delta: -7.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.48ms. Allocated memory is still 134.2MB. Free memory was 99.3MB in the beginning and 96.4MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.42ms. Allocated memory is still 134.2MB. Free memory was 96.4MB in the beginning and 94.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 670.80ms. Allocated memory is still 134.2MB. Free memory was 94.7MB in the beginning and 74.7MB in the end (delta: 20.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 11332.03ms. Allocated memory was 134.2MB in the beginning and 222.3MB in the end (delta: 88.1MB). Free memory was 74.3MB in the beginning and 119.6MB in the end (delta: -45.3MB). Peak memory consumption was 100.3MB. Max. memory is 16.1GB. * Witness Printer took 90.11ms. Allocated memory is still 222.3MB. Free memory was 119.6MB in the beginning and 113.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1015]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 109 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.2s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1417 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1372 mSDsluCounter, 4715 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3204 mSDsCounter, 426 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1597 IncrementalHoareTripleChecker+Invalid, 2023 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 426 mSolverCounterUnsat, 1511 mSDtfsCounter, 1597 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 413 GetRequests, 310 SyntacticMatches, 2 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 220 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=637occurred in iteration=9, InterpolantAutomatonStates: 86, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 67 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 1412 PreInvPairs, 1618 NumberOfFragments, 1305 HoareAnnotationTreeSize, 1412 FomulaSimplifications, 36 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 50 FomulaSimplificationsInter, 10065 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.9s InterpolantComputationTime, 796 NumberOfCodeBlocks, 796 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 783 ConstructedInterpolants, 0 QuantifiedInterpolants, 1585 SizeOfPredicates, 6 NumberOfNonLiveVariables, 922 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 111/116 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(0 <= methaneLevelCritical)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((1 <= tmp && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((\result == 1 && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((((((2 <= waterLevel && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && 0 < tmp + 1) && tmp <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: (((\result == 1 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \result == 1) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive)) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 401]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1011]: Loop Invariant Derived loop invariant: !(0 <= methaneLevelCritical) || 0 == systemActive - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 974]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((\old(pumpRunning) == 0 || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-02 21:09:01,482 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c00096d-c99c-4c30-8cac-85a622ad6cc2/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE