./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 21:04:06,303 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 21:04:06,305 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 21:04:06,335 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 21:04:06,336 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 21:04:06,337 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 21:04:06,339 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 21:04:06,341 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 21:04:06,343 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 21:04:06,344 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 21:04:06,345 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 21:04:06,346 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 21:04:06,347 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 21:04:06,348 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 21:04:06,349 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 21:04:06,350 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 21:04:06,351 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 21:04:06,353 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 21:04:06,354 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 21:04:06,357 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 21:04:06,358 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 21:04:06,360 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 21:04:06,361 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 21:04:06,362 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 21:04:06,366 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 21:04:06,366 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 21:04:06,367 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 21:04:06,368 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 21:04:06,368 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 21:04:06,370 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 21:04:06,370 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 21:04:06,371 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 21:04:06,372 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 21:04:06,373 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 21:04:06,374 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 21:04:06,375 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 21:04:06,376 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 21:04:06,376 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 21:04:06,376 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 21:04:06,377 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 21:04:06,378 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 21:04:06,379 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 21:04:06,406 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 21:04:06,412 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 21:04:06,413 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 21:04:06,414 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 21:04:06,415 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 21:04:06,415 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 21:04:06,416 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 21:04:06,416 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 21:04:06,417 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 21:04:06,417 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 21:04:06,418 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 21:04:06,418 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 21:04:06,418 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 21:04:06,419 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 21:04:06,419 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 21:04:06,419 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 21:04:06,419 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 21:04:06,419 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 21:04:06,420 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 21:04:06,420 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 21:04:06,420 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 21:04:06,420 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 21:04:06,420 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 21:04:06,421 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 21:04:06,421 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:04:06,421 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 21:04:06,421 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 21:04:06,422 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 21:04:06,422 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 21:04:06,422 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 21:04:06,423 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 21:04:06,424 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 21:04:06,424 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 21:04:06,424 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b [2022-11-02 21:04:06,797 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 21:04:06,826 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 21:04:06,831 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 21:04:06,832 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 21:04:06,833 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 21:04:06,835 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2022-11-02 21:04:06,905 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/data/b2b123f3f/f8819548c540440bbb11969fccb371d5/FLAGec54660e3 [2022-11-02 21:04:07,492 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 21:04:07,503 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2022-11-02 21:04:07,521 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/data/b2b123f3f/f8819548c540440bbb11969fccb371d5/FLAGec54660e3 [2022-11-02 21:04:07,795 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/data/b2b123f3f/f8819548c540440bbb11969fccb371d5 [2022-11-02 21:04:07,797 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 21:04:07,799 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 21:04:07,804 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 21:04:07,805 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 21:04:07,808 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 21:04:07,809 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:04:07" (1/1) ... [2022-11-02 21:04:07,810 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@64f5f029 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:07, skipping insertion in model container [2022-11-02 21:04:07,810 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:04:07" (1/1) ... [2022-11-02 21:04:07,817 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 21:04:07,862 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 21:04:08,085 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2022-11-02 21:04:08,185 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:04:08,199 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 21:04:08,243 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2022-11-02 21:04:08,309 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:04:08,326 INFO L208 MainTranslator]: Completed translation [2022-11-02 21:04:08,327 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08 WrapperNode [2022-11-02 21:04:08,327 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 21:04:08,328 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 21:04:08,328 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 21:04:08,329 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 21:04:08,337 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,351 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,395 INFO L138 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 273 [2022-11-02 21:04:08,395 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 21:04:08,396 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 21:04:08,396 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 21:04:08,396 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 21:04:08,407 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,407 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,410 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,410 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,417 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,422 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,424 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,426 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,429 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 21:04:08,430 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 21:04:08,430 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 21:04:08,430 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 21:04:08,438 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (1/1) ... [2022-11-02 21:04:08,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:04:08,476 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:04:08,488 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 21:04:08,490 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 21:04:08,540 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 21:04:08,540 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 21:04:08,540 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 21:04:08,541 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 21:04:08,542 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 21:04:08,542 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-02 21:04:08,542 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-02 21:04:08,544 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 21:04:08,544 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 21:04:08,544 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:04:08,545 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:04:08,545 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 21:04:08,545 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 21:04:08,545 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:04:08,545 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:04:08,545 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-02 21:04:08,545 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-02 21:04:08,546 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 21:04:08,546 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 21:04:08,546 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 21:04:08,546 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 21:04:08,546 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 21:04:08,546 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 21:04:08,546 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 21:04:08,638 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 21:04:08,640 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 21:04:09,062 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 21:04:09,070 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 21:04:09,070 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 21:04:09,072 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:04:09 BoogieIcfgContainer [2022-11-02 21:04:09,073 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 21:04:09,075 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 21:04:09,075 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 21:04:09,096 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 21:04:09,096 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 09:04:07" (1/3) ... [2022-11-02 21:04:09,097 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65cc9ea9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:04:09, skipping insertion in model container [2022-11-02 21:04:09,097 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:04:08" (2/3) ... [2022-11-02 21:04:09,097 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65cc9ea9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:04:09, skipping insertion in model container [2022-11-02 21:04:09,098 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:04:09" (3/3) ... [2022-11-02 21:04:09,099 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product63.cil.c [2022-11-02 21:04:09,118 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 21:04:09,118 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 21:04:09,188 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 21:04:09,195 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@112d8a7, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 21:04:09,195 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 21:04:09,200 INFO L276 IsEmpty]: Start isEmpty. Operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-02 21:04:09,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-02 21:04:09,211 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:09,212 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:09,212 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:09,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:09,218 INFO L85 PathProgramCache]: Analyzing trace with hash 155128550, now seen corresponding path program 1 times [2022-11-02 21:04:09,227 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:09,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204767464] [2022-11-02 21:04:09,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:09,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:09,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:09,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:04:09,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:09,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:04:09,514 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:09,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204767464] [2022-11-02 21:04:09,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204767464] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:09,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:09,516 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 21:04:09,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088190790] [2022-11-02 21:04:09,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:09,524 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 21:04:09,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:09,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 21:04:09,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:04:09,573 INFO L87 Difference]: Start difference. First operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:09,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:09,629 INFO L93 Difference]: Finished difference Result 216 states and 293 transitions. [2022-11-02 21:04:09,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 21:04:09,632 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-02 21:04:09,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:09,644 INFO L225 Difference]: With dead ends: 216 [2022-11-02 21:04:09,644 INFO L226 Difference]: Without dead ends: 103 [2022-11-02 21:04:09,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:04:09,657 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:09,661 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:04:09,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-11-02 21:04:09,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 103. [2022-11-02 21:04:09,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-02 21:04:09,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 134 transitions. [2022-11-02 21:04:09,720 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 134 transitions. Word has length 23 [2022-11-02 21:04:09,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:09,721 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 134 transitions. [2022-11-02 21:04:09,722 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:09,722 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 134 transitions. [2022-11-02 21:04:09,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-02 21:04:09,727 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:09,727 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:09,727 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 21:04:09,728 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:09,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:09,729 INFO L85 PathProgramCache]: Analyzing trace with hash -389594040, now seen corresponding path program 1 times [2022-11-02 21:04:09,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:09,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727615268] [2022-11-02 21:04:09,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:09,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:09,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:09,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 21:04:09,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:09,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:04:09,939 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:09,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727615268] [2022-11-02 21:04:09,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727615268] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:09,941 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:09,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 21:04:09,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000974986] [2022-11-02 21:04:09,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:09,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:04:09,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:09,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:04:09,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:04:09,945 INFO L87 Difference]: Start difference. First operand 103 states and 134 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:09,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:09,972 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2022-11-02 21:04:09,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:04:09,974 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-02 21:04:09,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:09,976 INFO L225 Difference]: With dead ends: 168 [2022-11-02 21:04:09,976 INFO L226 Difference]: Without dead ends: 94 [2022-11-02 21:04:09,977 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:04:09,979 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 16 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:09,980 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:04:09,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-02 21:04:10,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-11-02 21:04:10,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-02 21:04:10,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-11-02 21:04:10,009 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 24 [2022-11-02 21:04:10,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:10,010 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-11-02 21:04:10,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:10,010 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-11-02 21:04:10,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-02 21:04:10,012 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:10,012 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:10,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 21:04:10,012 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:10,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:10,013 INFO L85 PathProgramCache]: Analyzing trace with hash -2116148500, now seen corresponding path program 1 times [2022-11-02 21:04:10,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:10,014 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1834169496] [2022-11-02 21:04:10,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:10,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:10,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:04:10,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:04:10,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:10,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1834169496] [2022-11-02 21:04:10,152 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1834169496] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:10,152 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:10,152 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 21:04:10,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472748342] [2022-11-02 21:04:10,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:10,153 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:04:10,153 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:10,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:04:10,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:04:10,154 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:10,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:10,196 INFO L93 Difference]: Finished difference Result 267 states and 352 transitions. [2022-11-02 21:04:10,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:04:10,197 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-02 21:04:10,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:10,200 INFO L225 Difference]: With dead ends: 267 [2022-11-02 21:04:10,200 INFO L226 Difference]: Without dead ends: 180 [2022-11-02 21:04:10,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:04:10,203 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 102 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:10,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 265 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:04:10,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-02 21:04:10,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 177. [2022-11-02 21:04:10,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2022-11-02 21:04:10,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 233 transitions. [2022-11-02 21:04:10,233 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 233 transitions. Word has length 28 [2022-11-02 21:04:10,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:10,233 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 233 transitions. [2022-11-02 21:04:10,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:10,234 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 233 transitions. [2022-11-02 21:04:10,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-02 21:04:10,236 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:10,236 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:10,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 21:04:10,236 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:10,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:10,237 INFO L85 PathProgramCache]: Analyzing trace with hash -1322411102, now seen corresponding path program 1 times [2022-11-02 21:04:10,252 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:10,252 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [530637003] [2022-11-02 21:04:10,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:10,253 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:10,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 21:04:10,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:04:10,451 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:10,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [530637003] [2022-11-02 21:04:10,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [530637003] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:10,452 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:10,452 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:04:10,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215797304] [2022-11-02 21:04:10,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:10,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:04:10,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:10,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:04:10,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:04:10,454 INFO L87 Difference]: Start difference. First operand 177 states and 233 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:10,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:10,630 INFO L93 Difference]: Finished difference Result 461 states and 620 transitions. [2022-11-02 21:04:10,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 21:04:10,631 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-02 21:04:10,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:10,634 INFO L225 Difference]: With dead ends: 461 [2022-11-02 21:04:10,639 INFO L226 Difference]: Without dead ends: 291 [2022-11-02 21:04:10,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:04:10,643 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 75 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:10,649 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 456 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:04:10,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-02 21:04:10,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 278. [2022-11-02 21:04:10,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 201 states have (on average 1.2885572139303483) internal successors, (259), 220 states have internal predecessors, (259), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2022-11-02 21:04:10,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 355 transitions. [2022-11-02 21:04:10,725 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 355 transitions. Word has length 32 [2022-11-02 21:04:10,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:10,726 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 355 transitions. [2022-11-02 21:04:10,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:04:10,727 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 355 transitions. [2022-11-02 21:04:10,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-02 21:04:10,729 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:10,729 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:10,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 21:04:10,730 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:10,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:10,731 INFO L85 PathProgramCache]: Analyzing trace with hash -1980945601, now seen corresponding path program 1 times [2022-11-02 21:04:10,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:10,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1284379086] [2022-11-02 21:04:10,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:10,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:10,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:04:10,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:10,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:10,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:11,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:11,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:04:11,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,043 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:04:11,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:11,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1284379086] [2022-11-02 21:04:11,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1284379086] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:11,044 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:11,044 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:04:11,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482958116] [2022-11-02 21:04:11,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:11,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:04:11,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:11,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:04:11,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:04:11,048 INFO L87 Difference]: Start difference. First operand 278 states and 355 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:04:11,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:11,315 INFO L93 Difference]: Finished difference Result 619 states and 814 transitions. [2022-11-02 21:04:11,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:04:11,315 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-02 21:04:11,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:11,327 INFO L225 Difference]: With dead ends: 619 [2022-11-02 21:04:11,327 INFO L226 Difference]: Without dead ends: 348 [2022-11-02 21:04:11,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 21:04:11,336 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 75 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:11,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 401 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:04:11,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-11-02 21:04:11,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 336. [2022-11-02 21:04:11,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 336 states, 245 states have (on average 1.2612244897959184) internal successors, (309), 264 states have internal predecessors, (309), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-02 21:04:11,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 423 transitions. [2022-11-02 21:04:11,410 INFO L78 Accepts]: Start accepts. Automaton has 336 states and 423 transitions. Word has length 59 [2022-11-02 21:04:11,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:11,411 INFO L495 AbstractCegarLoop]: Abstraction has 336 states and 423 transitions. [2022-11-02 21:04:11,411 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:04:11,411 INFO L276 IsEmpty]: Start isEmpty. Operand 336 states and 423 transitions. [2022-11-02 21:04:11,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-02 21:04:11,413 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:11,413 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:11,414 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 21:04:11,414 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:11,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:11,415 INFO L85 PathProgramCache]: Analyzing trace with hash -1706185987, now seen corresponding path program 1 times [2022-11-02 21:04:11,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:11,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572435703] [2022-11-02 21:04:11,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:11,416 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:11,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:04:11,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:11,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:11,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:11,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:04:11,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,552 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:04:11,553 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:11,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572435703] [2022-11-02 21:04:11,553 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572435703] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:11,553 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:11,554 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:04:11,554 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635356776] [2022-11-02 21:04:11,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:11,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:04:11,555 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:11,555 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:04:11,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:04:11,556 INFO L87 Difference]: Start difference. First operand 336 states and 423 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:04:11,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:11,729 INFO L93 Difference]: Finished difference Result 683 states and 886 transitions. [2022-11-02 21:04:11,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 21:04:11,730 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-02 21:04:11,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:11,733 INFO L225 Difference]: With dead ends: 683 [2022-11-02 21:04:11,733 INFO L226 Difference]: Without dead ends: 354 [2022-11-02 21:04:11,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:04:11,736 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 79 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:11,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 315 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:04:11,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2022-11-02 21:04:11,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 340. [2022-11-02 21:04:11,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 249 states have (on average 1.2570281124497993) internal successors, (313), 268 states have internal predecessors, (313), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-02 21:04:11,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 427 transitions. [2022-11-02 21:04:11,793 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 427 transitions. Word has length 59 [2022-11-02 21:04:11,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:11,794 INFO L495 AbstractCegarLoop]: Abstraction has 340 states and 427 transitions. [2022-11-02 21:04:11,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:04:11,794 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 427 transitions. [2022-11-02 21:04:11,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-02 21:04:11,796 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:11,796 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:11,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 21:04:11,797 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:11,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:11,797 INFO L85 PathProgramCache]: Analyzing trace with hash 344798011, now seen corresponding path program 1 times [2022-11-02 21:04:11,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:11,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301681511] [2022-11-02 21:04:11,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:11,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:11,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:04:11,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:11,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:11,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:11,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:04:11,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:11,958 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:04:11,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:11,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301681511] [2022-11-02 21:04:11,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301681511] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:11,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:11,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:04:11,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1392812235] [2022-11-02 21:04:11,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:11,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:04:11,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:11,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:04:11,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:04:11,969 INFO L87 Difference]: Start difference. First operand 340 states and 427 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:04:12,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:12,301 INFO L93 Difference]: Finished difference Result 941 states and 1230 transitions. [2022-11-02 21:04:12,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:04:12,301 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2022-11-02 21:04:12,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:12,306 INFO L225 Difference]: With dead ends: 941 [2022-11-02 21:04:12,307 INFO L226 Difference]: Without dead ends: 608 [2022-11-02 21:04:12,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:04:12,311 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 242 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 250 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:12,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [250 Valid, 352 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:04:12,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2022-11-02 21:04:12,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 601. [2022-11-02 21:04:12,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 601 states, 442 states have (on average 1.2330316742081449) internal successors, (545), 470 states have internal predecessors, (545), 81 states have call successors, (81), 71 states have call predecessors, (81), 77 states have return successors, (133), 82 states have call predecessors, (133), 81 states have call successors, (133) [2022-11-02 21:04:12,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 601 states to 601 states and 759 transitions. [2022-11-02 21:04:12,388 INFO L78 Accepts]: Start accepts. Automaton has 601 states and 759 transitions. Word has length 59 [2022-11-02 21:04:12,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:12,392 INFO L495 AbstractCegarLoop]: Abstraction has 601 states and 759 transitions. [2022-11-02 21:04:12,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:04:12,393 INFO L276 IsEmpty]: Start isEmpty. Operand 601 states and 759 transitions. [2022-11-02 21:04:12,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-02 21:04:12,394 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:12,395 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:12,395 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 21:04:12,396 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:12,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:12,397 INFO L85 PathProgramCache]: Analyzing trace with hash 616558741, now seen corresponding path program 1 times [2022-11-02 21:04:12,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:12,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605863754] [2022-11-02 21:04:12,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:12,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:12,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:04:12,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 21:04:12,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:12,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:12,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:12,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 21:04:12,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:12,665 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:04:12,665 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:12,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605863754] [2022-11-02 21:04:12,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605863754] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:12,665 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:12,666 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 21:04:12,666 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2044717142] [2022-11-02 21:04:12,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:12,666 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:04:12,667 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:12,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:04:12,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:04:12,668 INFO L87 Difference]: Start difference. First operand 601 states and 759 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 21:04:13,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:13,570 INFO L93 Difference]: Finished difference Result 2059 states and 2701 transitions. [2022-11-02 21:04:13,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-02 21:04:13,571 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2022-11-02 21:04:13,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:13,580 INFO L225 Difference]: With dead ends: 2059 [2022-11-02 21:04:13,580 INFO L226 Difference]: Without dead ends: 1465 [2022-11-02 21:04:13,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 128 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2022-11-02 21:04:13,586 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 367 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 548 mSolverCounterSat, 185 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 375 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 185 IncrementalHoareTripleChecker+Valid, 548 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:13,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [375 Valid, 404 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [185 Valid, 548 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-02 21:04:13,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1465 states. [2022-11-02 21:04:13,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1465 to 1357. [2022-11-02 21:04:13,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1357 states, 988 states have (on average 1.2044534412955465) internal successors, (1190), 1059 states have internal predecessors, (1190), 194 states have call successors, (194), 142 states have call predecessors, (194), 174 states have return successors, (352), 200 states have call predecessors, (352), 194 states have call successors, (352) [2022-11-02 21:04:13,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1357 states to 1357 states and 1736 transitions. [2022-11-02 21:04:13,738 INFO L78 Accepts]: Start accepts. Automaton has 1357 states and 1736 transitions. Word has length 63 [2022-11-02 21:04:13,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:13,741 INFO L495 AbstractCegarLoop]: Abstraction has 1357 states and 1736 transitions. [2022-11-02 21:04:13,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 21:04:13,742 INFO L276 IsEmpty]: Start isEmpty. Operand 1357 states and 1736 transitions. [2022-11-02 21:04:13,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-02 21:04:13,745 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:13,745 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:13,745 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 21:04:13,745 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:13,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:13,746 INFO L85 PathProgramCache]: Analyzing trace with hash 1067655569, now seen corresponding path program 1 times [2022-11-02 21:04:13,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:13,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326957373] [2022-11-02 21:04:13,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:13,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:13,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:13,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:04:13,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:13,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-02 21:04:13,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:13,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-02 21:04:13,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:14,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:14,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:14,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-02 21:04:14,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,264 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:04:14,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:14,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326957373] [2022-11-02 21:04:14,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326957373] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:04:14,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1642702541] [2022-11-02 21:04:14,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:14,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:04:14,266 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:04:14,271 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:04:14,303 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 21:04:14,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:14,395 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:04:14,401 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:04:14,742 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:04:14,742 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:04:14,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1642702541] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:14,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:04:14,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-11-02 21:04:14,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871581938] [2022-11-02 21:04:14,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:14,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:04:14,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:14,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:04:14,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2022-11-02 21:04:14,745 INFO L87 Difference]: Start difference. First operand 1357 states and 1736 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-02 21:04:15,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:15,036 INFO L93 Difference]: Finished difference Result 2641 states and 3397 transitions. [2022-11-02 21:04:15,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:04:15,043 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 67 [2022-11-02 21:04:15,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:15,050 INFO L225 Difference]: With dead ends: 2641 [2022-11-02 21:04:15,050 INFO L226 Difference]: Without dead ends: 1291 [2022-11-02 21:04:15,055 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2022-11-02 21:04:15,057 INFO L413 NwaCegarLoop]: 225 mSDtfsCounter, 85 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 823 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:15,057 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 823 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:04:15,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1291 states. [2022-11-02 21:04:15,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1291 to 1287. [2022-11-02 21:04:15,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1287 states, 934 states have (on average 1.1927194860813704) internal successors, (1114), 1003 states have internal predecessors, (1114), 188 states have call successors, (188), 138 states have call predecessors, (188), 164 states have return successors, (308), 188 states have call predecessors, (308), 188 states have call successors, (308) [2022-11-02 21:04:15,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1287 states to 1287 states and 1610 transitions. [2022-11-02 21:04:15,168 INFO L78 Accepts]: Start accepts. Automaton has 1287 states and 1610 transitions. Word has length 67 [2022-11-02 21:04:15,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:15,168 INFO L495 AbstractCegarLoop]: Abstraction has 1287 states and 1610 transitions. [2022-11-02 21:04:15,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-02 21:04:15,169 INFO L276 IsEmpty]: Start isEmpty. Operand 1287 states and 1610 transitions. [2022-11-02 21:04:15,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-11-02 21:04:15,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:15,173 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:15,219 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 21:04:15,398 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-02 21:04:15,399 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:15,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:15,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1513239529, now seen corresponding path program 1 times [2022-11-02 21:04:15,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:15,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1677316992] [2022-11-02 21:04:15,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:15,400 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:15,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:04:15,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 21:04:15,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 21:04:15,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:15,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:15,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:15,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-02 21:04:15,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 21:04:15,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-02 21:04:15,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:15,572 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-02 21:04:15,572 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:15,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1677316992] [2022-11-02 21:04:15,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1677316992] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:15,573 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:04:15,573 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 21:04:15,573 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1841594088] [2022-11-02 21:04:15,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:15,574 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:04:15,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:15,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:04:15,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:04:15,576 INFO L87 Difference]: Start difference. First operand 1287 states and 1610 transitions. Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-02 21:04:16,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:16,213 INFO L93 Difference]: Finished difference Result 1535 states and 1910 transitions. [2022-11-02 21:04:16,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-02 21:04:16,214 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 94 [2022-11-02 21:04:16,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:16,219 INFO L225 Difference]: With dead ends: 1535 [2022-11-02 21:04:16,219 INFO L226 Difference]: Without dead ends: 650 [2022-11-02 21:04:16,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-11-02 21:04:16,223 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 381 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 329 mSolverCounterSat, 182 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 390 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 511 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 182 IncrementalHoareTripleChecker+Valid, 329 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:16,223 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [390 Valid, 282 Invalid, 511 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [182 Valid, 329 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-02 21:04:16,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2022-11-02 21:04:16,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 630. [2022-11-02 21:04:16,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 630 states, 457 states have (on average 1.1575492341356675) internal successors, (529), 489 states have internal predecessors, (529), 91 states have call successors, (91), 68 states have call predecessors, (91), 81 states have return successors, (151), 92 states have call predecessors, (151), 91 states have call successors, (151) [2022-11-02 21:04:16,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 630 states and 771 transitions. [2022-11-02 21:04:16,300 INFO L78 Accepts]: Start accepts. Automaton has 630 states and 771 transitions. Word has length 94 [2022-11-02 21:04:16,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:16,300 INFO L495 AbstractCegarLoop]: Abstraction has 630 states and 771 transitions. [2022-11-02 21:04:16,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-02 21:04:16,301 INFO L276 IsEmpty]: Start isEmpty. Operand 630 states and 771 transitions. [2022-11-02 21:04:16,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-02 21:04:16,304 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:04:16,304 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:16,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-02 21:04:16,304 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:04:16,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:04:16,305 INFO L85 PathProgramCache]: Analyzing trace with hash 1984934984, now seen corresponding path program 1 times [2022-11-02 21:04:16,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:04:16,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278038573] [2022-11-02 21:04:16,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:16,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:04:16,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 21:04:16,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:04:16,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 21:04:16,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:16,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:04:16,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:16,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-02 21:04:16,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-02 21:04:16,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-02 21:04:16,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:04:16,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-02 21:04:16,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-02 21:04:16,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:04:16,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-11-02 21:04:16,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,709 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-02 21:04:16,709 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:04:16,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278038573] [2022-11-02 21:04:16,710 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278038573] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:04:16,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [623219947] [2022-11-02 21:04:16,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:04:16,710 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:04:16,711 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:04:16,712 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:04:16,738 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 21:04:16,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:04:16,859 INFO L263 TraceCheckSpWp]: Trace formula consists of 521 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:04:16,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:04:17,056 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-02 21:04:17,056 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:04:17,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [623219947] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:04:17,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:04:17,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-11-02 21:04:17,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010468326] [2022-11-02 21:04:17,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:04:17,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:04:17,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:04:17,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:04:17,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2022-11-02 21:04:17,059 INFO L87 Difference]: Start difference. First operand 630 states and 771 transitions. Second operand has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-02 21:04:17,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:04:17,279 INFO L93 Difference]: Finished difference Result 1093 states and 1358 transitions. [2022-11-02 21:04:17,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:04:17,280 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2022-11-02 21:04:17,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:04:17,281 INFO L225 Difference]: With dead ends: 1093 [2022-11-02 21:04:17,281 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 21:04:17,285 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2022-11-02 21:04:17,286 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 73 mSDsluCounter, 675 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 871 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:04:17,287 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 871 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:04:17,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 21:04:17,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 21:04:17,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 21:04:17,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 21:04:17,289 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2022-11-02 21:04:17,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:04:17,289 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 21:04:17,290 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-02 21:04:17,290 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 21:04:17,290 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 21:04:17,294 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 21:04:17,342 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 21:04:17,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:04:17,511 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 21:04:22,818 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 199 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (= 1 ~systemActive~0)) .cse1) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 (= 0 ~systemActive~0)))) [2022-11-02 21:04:22,818 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2022-11-02 21:04:22,818 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 199 206) no Hoare annotation was computed. [2022-11-02 21:04:22,818 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2022-11-02 21:04:22,819 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2022-11-02 21:04:22,819 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2022-11-02 21:04:22,819 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:04:22,819 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:04:22,819 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2022-11-02 21:04:22,820 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2022-11-02 21:04:22,820 INFO L895 garLoopResultBuilder]: At program point L986(lines 981 989) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:04:22,820 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 123 147) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,820 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,820 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2022-11-02 21:04:22,821 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2022-11-02 21:04:22,821 INFO L895 garLoopResultBuilder]: At program point L297(lines 282 300) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:04:22,821 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2022-11-02 21:04:22,821 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 914 925) the Hoare annotation is: (let ((.cse1 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse2 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse7 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3 .cse5) (or .cse4 .cse6 .cse7 .cse5) (or .cse4 .cse0 .cse6 .cse7))) [2022-11-02 21:04:22,821 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 914 925) no Hoare annotation was computed. [2022-11-02 21:04:22,822 INFO L899 garLoopResultBuilder]: For program point L918-1(lines 914 925) no Hoare annotation was computed. [2022-11-02 21:04:22,822 INFO L902 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: true [2022-11-02 21:04:22,822 INFO L899 garLoopResultBuilder]: For program point L769-1(line 769) no Hoare annotation was computed. [2022-11-02 21:04:22,822 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 763 792) no Hoare annotation was computed. [2022-11-02 21:04:22,822 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 763 792) the Hoare annotation is: true [2022-11-02 21:04:22,822 INFO L902 garLoopResultBuilder]: At program point L788(lines 763 792) the Hoare annotation is: true [2022-11-02 21:04:22,823 INFO L899 garLoopResultBuilder]: For program point L784(line 784) no Hoare annotation was computed. [2022-11-02 21:04:22,823 INFO L899 garLoopResultBuilder]: For program point L777(lines 777 781) no Hoare annotation was computed. [2022-11-02 21:04:22,823 INFO L902 garLoopResultBuilder]: At program point L777-1(lines 777 781) the Hoare annotation is: true [2022-11-02 21:04:22,823 INFO L899 garLoopResultBuilder]: For program point L774(line 774) no Hoare annotation was computed. [2022-11-02 21:04:22,823 INFO L902 garLoopResultBuilder]: At program point L773-2(lines 773 787) the Hoare annotation is: true [2022-11-02 21:04:22,823 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 926 934) the Hoare annotation is: true [2022-11-02 21:04:22,823 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 926 934) no Hoare annotation was computed. [2022-11-02 21:04:22,824 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 926 934) no Hoare annotation was computed. [2022-11-02 21:04:22,824 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,824 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 898) no Hoare annotation was computed. [2022-11-02 21:04:22,824 INFO L895 garLoopResultBuilder]: At program point L894-2(lines 890 901) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-02 21:04:22,824 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-02 21:04:22,825 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2022-11-02 21:04:22,825 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 0 ~systemActive~0))) (or (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2022-11-02 21:04:22,825 INFO L895 garLoopResultBuilder]: At program point L168-1(lines 149 173) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse3 .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)))) [2022-11-02 21:04:22,825 INFO L899 garLoopResultBuilder]: For program point L391(line 391) no Hoare annotation was computed. [2022-11-02 21:04:22,826 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2022-11-02 21:04:22,826 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2022-11-02 21:04:22,826 INFO L895 garLoopResultBuilder]: At program point L392(lines 387 394) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 0 ~systemActive~0))) (or (not (= 1 ~systemActive~0)) .cse0))) [2022-11-02 21:04:22,826 INFO L895 garLoopResultBuilder]: At program point L867(line 867) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse3 .cse1 .cse2 .cse4) (or .cse3 (and .cse0 .cse4) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-02 21:04:22,826 INFO L899 garLoopResultBuilder]: For program point L867-1(line 867) no Hoare annotation was computed. [2022-11-02 21:04:22,827 INFO L895 garLoopResultBuilder]: At program point L223(lines 218 226) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse5 (and .cse7 .cse8 .cse6) .cse3) (or .cse4 (and .cse7 .cse8) .cse5) (or .cse4 .cse1 .cse2))) [2022-11-02 21:04:22,827 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2022-11-02 21:04:22,827 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2022-11-02 21:04:22,827 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 88) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (= 0 ~systemActive~0))))) [2022-11-02 21:04:22,827 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-11-02 21:04:22,827 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2022-11-02 21:04:22,828 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2022-11-02 21:04:22,828 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 391) no Hoare annotation was computed. [2022-11-02 21:04:22,828 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 882) no Hoare annotation was computed. [2022-11-02 21:04:22,828 INFO L895 garLoopResultBuilder]: At program point L869-1(lines 861 885) the Hoare annotation is: (let ((.cse10 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not .cse10)) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 1))) (.cse6 (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 (and .cse1 .cse5 .cse2 .cse6) .cse7 .cse8 .cse4) (or .cse0 .cse9 .cse8 .cse2) (or .cse9 .cse3 (and .cse1 .cse10)) (or .cse9 (and (<= 2 ~waterLevel~0) .cse5 .cse6) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse8 (and .cse1 .cse10 .cse5 .cse6))))) [2022-11-02 21:04:22,829 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-02 21:04:22,829 INFO L895 garLoopResultBuilder]: At program point L378(lines 329 379) the Hoare annotation is: false [2022-11-02 21:04:22,829 INFO L895 garLoopResultBuilder]: At program point L1006(lines 1002 1008) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-02 21:04:22,829 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 372) no Hoare annotation was computed. [2022-11-02 21:04:22,829 INFO L895 garLoopResultBuilder]: At program point L366-2(lines 360 373) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 0 ~methaneLevelCritical~0))) (or (and (= 1 ~systemActive~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= 0 ~systemActive~0)))) [2022-11-02 21:04:22,829 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 21:04:22,830 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-11-02 21:04:22,830 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 21:04:22,830 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2022-11-02 21:04:22,830 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 21:04:22,830 INFO L895 garLoopResultBuilder]: At program point L313(lines 301 315) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 0 ~methaneLevelCritical~0) (= 0 ~systemActive~0)) [2022-11-02 21:04:22,830 INFO L895 garLoopResultBuilder]: At program point L375(lines 330 377) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-02 21:04:22,831 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-02 21:04:22,831 INFO L895 garLoopResultBuilder]: At program point L821(lines 817 823) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-02 21:04:22,831 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2022-11-02 21:04:22,831 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2022-11-02 21:04:22,831 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 21:04:22,831 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 854) no Hoare annotation was computed. [2022-11-02 21:04:22,832 INFO L899 garLoopResultBuilder]: For program point L847-2(lines 847 854) no Hoare annotation was computed. [2022-11-02 21:04:22,832 INFO L899 garLoopResultBuilder]: For program point L331(lines 330 377) no Hoare annotation was computed. [2022-11-02 21:04:22,832 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 373) no Hoare annotation was computed. [2022-11-02 21:04:22,832 INFO L895 garLoopResultBuilder]: At program point L352(line 352) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-02 21:04:22,832 INFO L902 garLoopResultBuilder]: At program point L831(lines 824 833) the Hoare annotation is: true [2022-11-02 21:04:22,832 INFO L895 garLoopResultBuilder]: At program point L1021(lines 1016 1024) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-02 21:04:22,833 INFO L902 garLoopResultBuilder]: At program point L381(lines 320 385) the Hoare annotation is: true [2022-11-02 21:04:22,833 INFO L902 garLoopResultBuilder]: At program point L856(lines 837 859) the Hoare annotation is: true [2022-11-02 21:04:22,833 INFO L895 garLoopResultBuilder]: At program point L1013(lines 1009 1015) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-02 21:04:22,833 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 346) no Hoare annotation was computed. [2022-11-02 21:04:22,833 INFO L899 garLoopResultBuilder]: For program point L340-1(lines 340 346) no Hoare annotation was computed. [2022-11-02 21:04:22,833 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 0 ~methaneLevelCritical~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))) (and (= 1 ~systemActive~0) .cse0 .cse1))) [2022-11-02 21:04:22,834 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 336) no Hoare annotation was computed. [2022-11-02 21:04:22,834 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 97 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,834 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:04:22,834 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2022-11-02 21:04:22,834 INFO L899 garLoopResultBuilder]: For program point L971(lines 971 977) no Hoare annotation was computed. [2022-11-02 21:04:22,834 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-02 21:04:22,835 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2022-11-02 21:04:22,835 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,835 INFO L895 garLoopResultBuilder]: At program point L189-2(lines 182 198) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (<= 2 ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) .cse0) (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse1 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,835 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2022-11-02 21:04:22,835 INFO L895 garLoopResultBuilder]: At program point L278(lines 263 281) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4))))) [2022-11-02 21:04:22,836 INFO L895 garLoopResultBuilder]: At program point L179(lines 174 181) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (<= 2 ~waterLevel~0) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-02 21:04:22,836 INFO L895 garLoopResultBuilder]: At program point L976(lines 967 980) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse1 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2) (and .cse3 .cse1)) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse4 .cse1 .cse2) (and .cse3 .cse4 .cse1) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-11-02 21:04:22,836 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2022-11-02 21:04:22,836 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) .cse2)) (.cse1 (not .cse2))) (and (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)))))) [2022-11-02 21:04:22,836 INFO L899 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2022-11-02 21:04:22,837 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2022-11-02 21:04:22,837 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2022-11-02 21:04:22,837 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 902 913) no Hoare annotation was computed. [2022-11-02 21:04:22,837 INFO L899 garLoopResultBuilder]: For program point L906-1(lines 902 913) no Hoare annotation was computed. [2022-11-02 21:04:22,837 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 902 913) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-02 21:04:22,837 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 207 217) the Hoare annotation is: true [2022-11-02 21:04:22,838 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2022-11-02 21:04:22,838 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 207 217) no Hoare annotation was computed. [2022-11-02 21:04:22,838 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2022-11-02 21:04:22,838 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2022-11-02 21:04:22,841 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:04:22,844 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 21:04:22,873 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 09:04:22 BoogieIcfgContainer [2022-11-02 21:04:22,873 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 21:04:22,874 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 21:04:22,874 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 21:04:22,875 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 21:04:22,875 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:04:09" (3/4) ... [2022-11-02 21:04:22,878 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 21:04:22,884 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 21:04:22,885 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 21:04:22,885 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 21:04:22,885 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 21:04:22,885 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-02 21:04:22,885 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 21:04:22,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 21:04:22,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 21:04:22,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:04:22,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-02 21:04:22,893 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-02 21:04:22,894 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 21:04:22,894 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 21:04:22,895 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 21:04:22,895 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 21:04:22,896 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:04:22,896 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:04:22,921 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,921 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) [2022-11-02 21:04:22,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((((!(1 == systemActive) || ((2 <= waterLevel && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && tmp <= 0)) || !(0 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0)) [2022-11-02 21:04:22,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2022-11-02 21:04:22,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (!(1 == systemActive) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-02 21:04:22,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-11-02 21:04:22,956 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 21:04:22,956 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 21:04:22,957 INFO L158 Benchmark]: Toolchain (without parser) took 15157.74ms. Allocated memory was 98.6MB in the beginning and 213.9MB in the end (delta: 115.3MB). Free memory was 57.0MB in the beginning and 157.5MB in the end (delta: -100.6MB). Peak memory consumption was 13.0MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,957 INFO L158 Benchmark]: CDTParser took 0.38ms. Allocated memory is still 98.6MB. Free memory was 74.1MB in the beginning and 74.0MB in the end (delta: 51.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:04:22,958 INFO L158 Benchmark]: CACSL2BoogieTranslator took 523.18ms. Allocated memory is still 98.6MB. Free memory was 56.8MB in the beginning and 65.6MB in the end (delta: -8.8MB). Peak memory consumption was 4.4MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,958 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.10ms. Allocated memory is still 98.6MB. Free memory was 65.6MB in the beginning and 62.9MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,958 INFO L158 Benchmark]: Boogie Preprocessor took 33.12ms. Allocated memory is still 98.6MB. Free memory was 62.9MB in the beginning and 61.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:04:22,959 INFO L158 Benchmark]: RCFGBuilder took 643.06ms. Allocated memory is still 98.6MB. Free memory was 61.3MB in the beginning and 40.9MB in the end (delta: 20.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,959 INFO L158 Benchmark]: TraceAbstraction took 13799.00ms. Allocated memory was 98.6MB in the beginning and 213.9MB in the end (delta: 115.3MB). Free memory was 40.5MB in the beginning and 163.8MB in the end (delta: -123.4MB). Peak memory consumption was 98.9MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,959 INFO L158 Benchmark]: Witness Printer took 82.26ms. Allocated memory is still 213.9MB. Free memory was 163.8MB in the beginning and 157.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 21:04:22,961 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.38ms. Allocated memory is still 98.6MB. Free memory was 74.1MB in the beginning and 74.0MB in the end (delta: 51.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 523.18ms. Allocated memory is still 98.6MB. Free memory was 56.8MB in the beginning and 65.6MB in the end (delta: -8.8MB). Peak memory consumption was 4.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.10ms. Allocated memory is still 98.6MB. Free memory was 65.6MB in the beginning and 62.9MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.12ms. Allocated memory is still 98.6MB. Free memory was 62.9MB in the beginning and 61.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 643.06ms. Allocated memory is still 98.6MB. Free memory was 61.3MB in the beginning and 40.9MB in the end (delta: 20.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 13799.00ms. Allocated memory was 98.6MB in the beginning and 213.9MB in the end (delta: 115.3MB). Free memory was 40.5MB in the beginning and 163.8MB in the end (delta: -123.4MB). Peak memory consumption was 98.9MB. Max. memory is 16.1GB. * Witness Printer took 82.26ms. Allocated memory is still 213.9MB. Free memory was 163.8MB in the beginning and 157.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 391]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 112 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.7s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1543 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1495 mSDsluCounter, 4533 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2955 mSDsCounter, 519 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1692 IncrementalHoareTripleChecker+Invalid, 2211 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 519 mSolverCounterUnsat, 1578 mSDtfsCounter, 1692 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 402 GetRequests, 300 SyntacticMatches, 2 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 248 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1357occurred in iteration=8, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 181 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2590 PreInvPairs, 2875 NumberOfFragments, 1584 HoareAnnotationTreeSize, 2590 FomulaSimplifications, 1339 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 51 FomulaSimplificationsInter, 15668 FormulaSimplificationTreeSizeReductionInter, 4.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.9s InterpolantComputationTime, 817 NumberOfCodeBlocks, 817 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 804 ConstructedInterpolants, 0 QuantifiedInterpolants, 1618 SizeOfPredicates, 6 NumberOfNonLiveVariables, 913 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 124/138 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 1016]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && 0 == systemActive - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 861]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((((!(1 == systemActive) || ((2 <= waterLevel && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && tmp <= 0)) || !(0 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0)) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (!(1 == systemActive) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: ((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && 0 == systemActive)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-02 21:04:23,019 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_698f5b8b-1ff1-45e0-8212-4d25031148f6/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE