./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2bb4b23c61a0ce6fb5d219efb233ba1e5b1970509ba14aea9115d570a0ea376d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 21:00:14,342 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 21:00:14,345 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 21:00:14,397 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 21:00:14,398 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 21:00:14,402 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 21:00:14,405 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 21:00:14,411 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 21:00:14,414 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 21:00:14,423 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 21:00:14,424 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 21:00:14,426 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 21:00:14,426 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 21:00:14,428 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 21:00:14,429 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 21:00:14,430 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 21:00:14,431 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 21:00:14,433 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 21:00:14,435 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 21:00:14,437 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 21:00:14,443 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 21:00:14,446 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 21:00:14,450 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 21:00:14,452 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 21:00:14,466 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 21:00:14,466 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 21:00:14,467 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 21:00:14,468 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 21:00:14,468 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 21:00:14,470 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 21:00:14,470 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 21:00:14,471 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 21:00:14,472 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 21:00:14,473 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 21:00:14,478 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 21:00:14,479 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 21:00:14,480 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 21:00:14,480 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 21:00:14,480 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 21:00:14,481 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 21:00:14,482 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 21:00:14,485 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 21:00:14,534 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 21:00:14,537 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 21:00:14,538 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 21:00:14,538 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 21:00:14,539 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 21:00:14,539 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 21:00:14,540 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 21:00:14,540 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 21:00:14,541 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 21:00:14,541 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 21:00:14,542 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 21:00:14,543 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 21:00:14,543 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 21:00:14,543 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 21:00:14,544 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 21:00:14,544 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 21:00:14,544 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 21:00:14,544 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 21:00:14,545 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 21:00:14,545 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 21:00:14,545 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 21:00:14,546 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 21:00:14,546 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 21:00:14,546 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 21:00:14,546 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:00:14,547 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 21:00:14,548 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 21:00:14,549 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 21:00:14,549 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 21:00:14,549 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 21:00:14,550 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 21:00:14,550 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 21:00:14,550 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 21:00:14,551 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2bb4b23c61a0ce6fb5d219efb233ba1e5b1970509ba14aea9115d570a0ea376d [2022-11-02 21:00:14,879 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 21:00:14,920 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 21:00:14,924 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 21:00:14,926 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 21:00:14,927 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 21:00:14,928 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c [2022-11-02 21:00:15,062 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/data/0ef261645/2185176267544155b054e68fad0480e1/FLAGda012c157 [2022-11-02 21:00:15,815 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 21:00:15,816 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c [2022-11-02 21:00:15,849 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/data/0ef261645/2185176267544155b054e68fad0480e1/FLAGda012c157 [2022-11-02 21:00:16,074 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/data/0ef261645/2185176267544155b054e68fad0480e1 [2022-11-02 21:00:16,079 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 21:00:16,084 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 21:00:16,087 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 21:00:16,087 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 21:00:16,091 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 21:00:16,093 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,095 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@45039aa4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16, skipping insertion in model container [2022-11-02 21:00:16,096 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,104 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 21:00:16,147 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 21:00:16,405 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c[1605,1618] [2022-11-02 21:00:16,664 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:00:16,686 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 21:00:16,707 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/sv-benchmarks/c/product-lines/minepump_spec2_product47.cil.c[1605,1618] [2022-11-02 21:00:16,816 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:00:16,846 INFO L208 MainTranslator]: Completed translation [2022-11-02 21:00:16,847 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16 WrapperNode [2022-11-02 21:00:16,847 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 21:00:16,848 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 21:00:16,849 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 21:00:16,849 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 21:00:16,859 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,904 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,948 INFO L138 Inliner]: procedures = 56, calls = 158, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 249 [2022-11-02 21:00:16,953 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 21:00:16,954 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 21:00:16,962 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 21:00:16,962 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 21:00:16,973 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,974 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,977 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,977 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,984 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,989 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,996 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:16,998 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:17,001 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 21:00:17,017 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 21:00:17,017 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 21:00:17,018 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 21:00:17,019 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (1/1) ... [2022-11-02 21:00:17,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:00:17,044 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:00:17,059 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 21:00:17,092 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 21:00:17,119 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 21:00:17,119 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 21:00:17,119 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 21:00:17,119 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 21:00:17,120 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 21:00:17,120 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 21:00:17,120 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 21:00:17,120 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-02 21:00:17,121 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-02 21:00:17,122 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 21:00:17,122 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 21:00:17,123 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:00:17,123 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:00:17,123 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-02 21:00:17,123 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-02 21:00:17,123 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 21:00:17,123 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 21:00:17,124 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 21:00:17,124 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 21:00:17,124 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 21:00:17,124 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 21:00:17,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 21:00:17,253 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 21:00:17,256 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 21:00:17,818 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 21:00:17,827 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 21:00:17,827 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 21:00:17,839 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:00:17 BoogieIcfgContainer [2022-11-02 21:00:17,839 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 21:00:17,842 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 21:00:17,842 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 21:00:17,851 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 21:00:17,851 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 09:00:16" (1/3) ... [2022-11-02 21:00:17,852 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d3fb52b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:00:17, skipping insertion in model container [2022-11-02 21:00:17,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:00:16" (2/3) ... [2022-11-02 21:00:17,853 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d3fb52b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:00:17, skipping insertion in model container [2022-11-02 21:00:17,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:00:17" (3/3) ... [2022-11-02 21:00:17,855 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product47.cil.c [2022-11-02 21:00:17,881 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 21:00:17,881 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 21:00:17,963 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 21:00:17,972 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4cdbd210, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 21:00:17,972 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 21:00:17,978 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-02 21:00:17,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-02 21:00:17,991 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:17,992 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:17,993 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:17,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:18,000 INFO L85 PathProgramCache]: Analyzing trace with hash -320439114, now seen corresponding path program 1 times [2022-11-02 21:00:18,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:18,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505781076] [2022-11-02 21:00:18,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:18,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:18,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:18,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 21:00:18,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:18,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:18,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:18,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505781076] [2022-11-02 21:00:18,346 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [505781076] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:18,346 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:18,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 21:00:18,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134280155] [2022-11-02 21:00:18,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:18,355 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 21:00:18,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:18,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 21:00:18,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:00:18,406 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:18,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:18,497 INFO L93 Difference]: Finished difference Result 195 states and 264 transitions. [2022-11-02 21:00:18,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 21:00:18,500 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-02 21:00:18,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:18,519 INFO L225 Difference]: With dead ends: 195 [2022-11-02 21:00:18,520 INFO L226 Difference]: Without dead ends: 93 [2022-11-02 21:00:18,526 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:00:18,531 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:18,533 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:00:18,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-02 21:00:18,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-11-02 21:00:18,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-02 21:00:18,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2022-11-02 21:00:18,625 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 25 [2022-11-02 21:00:18,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:18,626 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2022-11-02 21:00:18,627 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:18,627 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2022-11-02 21:00:18,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-02 21:00:18,632 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:18,633 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:18,633 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 21:00:18,635 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:18,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:18,639 INFO L85 PathProgramCache]: Analyzing trace with hash -1934434610, now seen corresponding path program 1 times [2022-11-02 21:00:18,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:18,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646809459] [2022-11-02 21:00:18,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:18,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:18,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:18,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-02 21:00:18,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:18,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:18,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:18,859 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646809459] [2022-11-02 21:00:18,860 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646809459] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:18,860 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:18,860 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 21:00:18,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204758459] [2022-11-02 21:00:18,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:18,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:00:18,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:18,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:00:18,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:00:18,867 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:18,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:18,907 INFO L93 Difference]: Finished difference Result 147 states and 189 transitions. [2022-11-02 21:00:18,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:00:18,908 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-02 21:00:18,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:18,912 INFO L225 Difference]: With dead ends: 147 [2022-11-02 21:00:18,913 INFO L226 Difference]: Without dead ends: 84 [2022-11-02 21:00:18,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:00:18,924 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 16 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:18,925 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 193 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:00:18,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-02 21:00:18,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-11-02 21:00:18,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-02 21:00:18,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-11-02 21:00:18,971 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 26 [2022-11-02 21:00:18,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:18,973 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-11-02 21:00:18,973 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:18,973 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-11-02 21:00:18,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-02 21:00:18,977 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:18,977 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:18,978 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 21:00:18,978 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:18,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:18,979 INFO L85 PathProgramCache]: Analyzing trace with hash -172475024, now seen corresponding path program 1 times [2022-11-02 21:00:18,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:18,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773779212] [2022-11-02 21:00:18,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:18,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:19,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:19,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:00:19,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:19,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:19,185 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:19,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773779212] [2022-11-02 21:00:19,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773779212] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:19,186 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:19,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:00:19,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068348088] [2022-11-02 21:00:19,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:19,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:00:19,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:19,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:00:19,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:00:19,189 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:19,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:19,531 INFO L93 Difference]: Finished difference Result 278 states and 365 transitions. [2022-11-02 21:00:19,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 21:00:19,532 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-02 21:00:19,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:19,534 INFO L225 Difference]: With dead ends: 278 [2022-11-02 21:00:19,535 INFO L226 Difference]: Without dead ends: 202 [2022-11-02 21:00:19,535 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:00:19,537 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 288 mSDsluCounter, 335 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 468 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:19,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 468 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 21:00:19,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2022-11-02 21:00:19,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 196. [2022-11-02 21:00:19,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 196 states, 143 states have (on average 1.3566433566433567) internal successors, (194), 161 states have internal predecessors, (194), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 23 states have call predecessors, (32), 31 states have call successors, (32) [2022-11-02 21:00:19,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 257 transitions. [2022-11-02 21:00:19,605 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 257 transitions. Word has length 30 [2022-11-02 21:00:19,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:19,607 INFO L495 AbstractCegarLoop]: Abstraction has 196 states and 257 transitions. [2022-11-02 21:00:19,607 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:19,608 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 257 transitions. [2022-11-02 21:00:19,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-02 21:00:19,615 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:19,616 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:19,617 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 21:00:19,617 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:19,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:19,618 INFO L85 PathProgramCache]: Analyzing trace with hash -1019876102, now seen corresponding path program 1 times [2022-11-02 21:00:19,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:19,618 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273033878] [2022-11-02 21:00:19,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:19,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:19,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:19,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:00:19,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:19,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:19,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:19,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273033878] [2022-11-02 21:00:19,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273033878] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:19,908 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:19,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:00:19,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773410799] [2022-11-02 21:00:19,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:19,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:00:19,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:19,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:00:19,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:00:19,911 INFO L87 Difference]: Start difference. First operand 196 states and 257 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:20,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:20,068 INFO L93 Difference]: Finished difference Result 570 states and 759 transitions. [2022-11-02 21:00:20,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:00:20,069 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-02 21:00:20,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:20,073 INFO L225 Difference]: With dead ends: 570 [2022-11-02 21:00:20,073 INFO L226 Difference]: Without dead ends: 382 [2022-11-02 21:00:20,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-02 21:00:20,076 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 76 mSDsluCounter, 414 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 532 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:20,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 532 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:00:20,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2022-11-02 21:00:20,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 373. [2022-11-02 21:00:20,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 268 states have (on average 1.335820895522388) internal successors, (358), 303 states have internal predecessors, (358), 62 states have call successors, (62), 42 states have call predecessors, (62), 42 states have return successors, (67), 46 states have call predecessors, (67), 62 states have call successors, (67) [2022-11-02 21:00:20,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 487 transitions. [2022-11-02 21:00:20,170 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 487 transitions. Word has length 34 [2022-11-02 21:00:20,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:20,170 INFO L495 AbstractCegarLoop]: Abstraction has 373 states and 487 transitions. [2022-11-02 21:00:20,171 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 21:00:20,171 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 487 transitions. [2022-11-02 21:00:20,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-02 21:00:20,177 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:20,178 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:20,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 21:00:20,178 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:20,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:20,179 INFO L85 PathProgramCache]: Analyzing trace with hash 292189750, now seen corresponding path program 1 times [2022-11-02 21:00:20,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:20,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898914441] [2022-11-02 21:00:20,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:20,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:20,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:20,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:00:20,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:20,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:00:20,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:20,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:20,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:20,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898914441] [2022-11-02 21:00:20,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [898914441] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:20,405 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:20,406 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:00:20,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132287431] [2022-11-02 21:00:20,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:20,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:00:20,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:20,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:00:20,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:00:20,417 INFO L87 Difference]: Start difference. First operand 373 states and 487 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:00:20,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:20,926 INFO L93 Difference]: Finished difference Result 924 states and 1225 transitions. [2022-11-02 21:00:20,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:00:20,927 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-11-02 21:00:20,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:20,936 INFO L225 Difference]: With dead ends: 924 [2022-11-02 21:00:20,936 INFO L226 Difference]: Without dead ends: 559 [2022-11-02 21:00:20,939 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 21:00:20,943 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 129 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:20,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 203 Invalid, 312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-02 21:00:20,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 559 states. [2022-11-02 21:00:21,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 559 to 540. [2022-11-02 21:00:21,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 540 states, 391 states have (on average 1.2710997442455243) internal successors, (497), 428 states have internal predecessors, (497), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (105), 74 states have call predecessors, (105), 80 states have call successors, (105) [2022-11-02 21:00:21,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 540 states to 540 states and 682 transitions. [2022-11-02 21:00:21,039 INFO L78 Accepts]: Start accepts. Automaton has 540 states and 682 transitions. Word has length 38 [2022-11-02 21:00:21,039 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:21,040 INFO L495 AbstractCegarLoop]: Abstraction has 540 states and 682 transitions. [2022-11-02 21:00:21,040 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:00:21,040 INFO L276 IsEmpty]: Start isEmpty. Operand 540 states and 682 transitions. [2022-11-02 21:00:21,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:00:21,042 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:21,042 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:21,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 21:00:21,043 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:21,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:21,043 INFO L85 PathProgramCache]: Analyzing trace with hash 363168403, now seen corresponding path program 1 times [2022-11-02 21:00:21,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:21,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1975479141] [2022-11-02 21:00:21,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:21,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:21,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:00:21,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:00:21,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:21,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:21,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:00:21,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:21,299 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:00:21,299 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:21,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1975479141] [2022-11-02 21:00:21,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1975479141] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:21,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:21,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 21:00:21,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [557863803] [2022-11-02 21:00:21,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:21,302 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 21:00:21,303 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:21,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 21:00:21,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:00:21,304 INFO L87 Difference]: Start difference. First operand 540 states and 682 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 21:00:22,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:22,203 INFO L93 Difference]: Finished difference Result 1772 states and 2353 transitions. [2022-11-02 21:00:22,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-02 21:00:22,204 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-02 21:00:22,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:22,214 INFO L225 Difference]: With dead ends: 1772 [2022-11-02 21:00:22,214 INFO L226 Difference]: Without dead ends: 1240 [2022-11-02 21:00:22,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=85, Invalid=221, Unknown=0, NotChecked=0, Total=306 [2022-11-02 21:00:22,221 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 355 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 391 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 533 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 391 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:22,225 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [357 Valid, 237 Invalid, 533 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 391 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-02 21:00:22,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1240 states. [2022-11-02 21:00:22,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1240 to 1058. [2022-11-02 21:00:22,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1058 states, 783 states have (on average 1.240102171136654) internal successors, (971), 836 states have internal predecessors, (971), 146 states have call successors, (146), 122 states have call predecessors, (146), 128 states have return successors, (220), 142 states have call predecessors, (220), 146 states have call successors, (220) [2022-11-02 21:00:22,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1058 states to 1058 states and 1337 transitions. [2022-11-02 21:00:22,400 INFO L78 Accepts]: Start accepts. Automaton has 1058 states and 1337 transitions. Word has length 60 [2022-11-02 21:00:22,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:22,402 INFO L495 AbstractCegarLoop]: Abstraction has 1058 states and 1337 transitions. [2022-11-02 21:00:22,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 21:00:22,403 INFO L276 IsEmpty]: Start isEmpty. Operand 1058 states and 1337 transitions. [2022-11-02 21:00:22,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:00:22,407 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:22,407 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:22,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 21:00:22,408 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:22,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:22,409 INFO L85 PathProgramCache]: Analyzing trace with hash 435554961, now seen corresponding path program 1 times [2022-11-02 21:00:22,410 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:22,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [931266001] [2022-11-02 21:00:22,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:22,410 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:22,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:00:22,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:00:22,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:22,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:22,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:00:22,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:22,639 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:00:22,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:22,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [931266001] [2022-11-02 21:00:22,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [931266001] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:22,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:22,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 21:00:22,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621250373] [2022-11-02 21:00:22,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:22,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 21:00:22,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:22,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 21:00:22,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:00:22,643 INFO L87 Difference]: Start difference. First operand 1058 states and 1337 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:00:23,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:23,205 INFO L93 Difference]: Finished difference Result 2174 states and 2827 transitions. [2022-11-02 21:00:23,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 21:00:23,206 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-02 21:00:23,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:23,214 INFO L225 Difference]: With dead ends: 2174 [2022-11-02 21:00:23,215 INFO L226 Difference]: Without dead ends: 1124 [2022-11-02 21:00:23,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-02 21:00:23,220 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 136 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 319 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 319 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:23,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 223 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 319 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 21:00:23,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1124 states. [2022-11-02 21:00:23,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1124 to 1082. [2022-11-02 21:00:23,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1082 states, 807 states have (on average 1.2329615861214374) internal successors, (995), 860 states have internal predecessors, (995), 146 states have call successors, (146), 122 states have call predecessors, (146), 128 states have return successors, (220), 142 states have call predecessors, (220), 146 states have call successors, (220) [2022-11-02 21:00:23,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1082 states to 1082 states and 1361 transitions. [2022-11-02 21:00:23,335 INFO L78 Accepts]: Start accepts. Automaton has 1082 states and 1361 transitions. Word has length 60 [2022-11-02 21:00:23,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:23,339 INFO L495 AbstractCegarLoop]: Abstraction has 1082 states and 1361 transitions. [2022-11-02 21:00:23,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:00:23,340 INFO L276 IsEmpty]: Start isEmpty. Operand 1082 states and 1361 transitions. [2022-11-02 21:00:23,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:00:23,344 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:23,345 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:23,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 21:00:23,346 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:23,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:23,347 INFO L85 PathProgramCache]: Analyzing trace with hash 1137154835, now seen corresponding path program 1 times [2022-11-02 21:00:23,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:23,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1575491665] [2022-11-02 21:00:23,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:23,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:23,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:00:23,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:00:23,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:23,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:23,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 21:00:23,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:23,514 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:00:23,514 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:23,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1575491665] [2022-11-02 21:00:23,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1575491665] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:23,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:00:23,520 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:00:23,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1818296720] [2022-11-02 21:00:23,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:23,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:00:23,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:23,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:00:23,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:00:23,523 INFO L87 Difference]: Start difference. First operand 1082 states and 1361 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:00:23,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:23,929 INFO L93 Difference]: Finished difference Result 1974 states and 2521 transitions. [2022-11-02 21:00:23,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:00:23,930 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-02 21:00:23,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:23,936 INFO L225 Difference]: With dead ends: 1974 [2022-11-02 21:00:23,937 INFO L226 Difference]: Without dead ends: 900 [2022-11-02 21:00:23,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-02 21:00:23,945 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 137 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:23,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 195 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 21:00:23,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 900 states. [2022-11-02 21:00:24,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 900 to 886. [2022-11-02 21:00:24,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 886 states, 659 states have (on average 1.2154779969650986) internal successors, (801), 702 states have internal predecessors, (801), 120 states have call successors, (120), 100 states have call predecessors, (120), 106 states have return successors, (162), 116 states have call predecessors, (162), 120 states have call successors, (162) [2022-11-02 21:00:24,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 886 states to 886 states and 1083 transitions. [2022-11-02 21:00:24,038 INFO L78 Accepts]: Start accepts. Automaton has 886 states and 1083 transitions. Word has length 60 [2022-11-02 21:00:24,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:24,038 INFO L495 AbstractCegarLoop]: Abstraction has 886 states and 1083 transitions. [2022-11-02 21:00:24,039 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 21:00:24,039 INFO L276 IsEmpty]: Start isEmpty. Operand 886 states and 1083 transitions. [2022-11-02 21:00:24,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-02 21:00:24,043 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:24,043 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:24,043 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 21:00:24,044 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:24,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:24,044 INFO L85 PathProgramCache]: Analyzing trace with hash 1046043951, now seen corresponding path program 1 times [2022-11-02 21:00:24,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:24,045 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [623765146] [2022-11-02 21:00:24,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:24,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:24,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:00:24,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 21:00:24,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:00:24,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:24,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:24,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 21:00:24,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,453 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:00:24,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:24,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [623765146] [2022-11-02 21:00:24,454 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [623765146] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:00:24,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [398943039] [2022-11-02 21:00:24,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:24,455 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:00:24,456 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:00:24,461 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:00:24,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 21:00:24,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:24,609 INFO L263 TraceCheckSpWp]: Trace formula consists of 391 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:00:24,617 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:00:25,018 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:00:25,018 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:00:25,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [398943039] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:25,019 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:00:25,019 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-11-02 21:00:25,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643727201] [2022-11-02 21:00:25,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:25,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:00:25,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:25,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:00:25,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:00:25,022 INFO L87 Difference]: Start difference. First operand 886 states and 1083 transitions. Second operand has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-02 21:00:25,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:25,296 INFO L93 Difference]: Finished difference Result 1738 states and 2130 transitions. [2022-11-02 21:00:25,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:00:25,297 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 64 [2022-11-02 21:00:25,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:25,302 INFO L225 Difference]: With dead ends: 1738 [2022-11-02 21:00:25,302 INFO L226 Difference]: Without dead ends: 860 [2022-11-02 21:00:25,305 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:00:25,308 INFO L413 NwaCegarLoop]: 187 mSDtfsCounter, 71 mSDsluCounter, 863 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 1050 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:25,309 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 1050 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:00:25,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 860 states. [2022-11-02 21:00:25,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 860 to 856. [2022-11-02 21:00:25,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 856 states, 635 states have (on average 1.1984251968503936) internal successors, (761), 676 states have internal predecessors, (761), 118 states have call successors, (118), 100 states have call predecessors, (118), 102 states have return successors, (143), 112 states have call predecessors, (143), 118 states have call successors, (143) [2022-11-02 21:00:25,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 856 states to 856 states and 1022 transitions. [2022-11-02 21:00:25,389 INFO L78 Accepts]: Start accepts. Automaton has 856 states and 1022 transitions. Word has length 64 [2022-11-02 21:00:25,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:25,389 INFO L495 AbstractCegarLoop]: Abstraction has 856 states and 1022 transitions. [2022-11-02 21:00:25,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-02 21:00:25,390 INFO L276 IsEmpty]: Start isEmpty. Operand 856 states and 1022 transitions. [2022-11-02 21:00:25,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-02 21:00:25,394 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:25,395 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:25,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 21:00:25,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:00:25,610 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:25,610 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:25,610 INFO L85 PathProgramCache]: Analyzing trace with hash 2119698815, now seen corresponding path program 1 times [2022-11-02 21:00:25,610 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:25,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1008135067] [2022-11-02 21:00:25,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:25,611 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:25,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:00:25,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:00:25,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 21:00:25,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:25,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:25,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-02 21:00:25,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-02 21:00:25,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-02 21:00:25,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:25,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-02 21:00:25,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:00:25,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-02 21:00:25,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:25,909 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-02 21:00:25,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:25,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1008135067] [2022-11-02 21:00:25,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1008135067] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:00:25,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1939987454] [2022-11-02 21:00:25,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:25,911 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:00:25,911 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:00:25,914 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:00:25,930 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 21:00:26,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,071 INFO L263 TraceCheckSpWp]: Trace formula consists of 494 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-02 21:00:26,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:00:26,167 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-02 21:00:26,167 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:00:26,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1939987454] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:26,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:00:26,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-02 21:00:26,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640855800] [2022-11-02 21:00:26,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:26,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:00:26,169 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:26,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:00:26,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:00:26,170 INFO L87 Difference]: Start difference. First operand 856 states and 1022 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-02 21:00:26,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:26,272 INFO L93 Difference]: Finished difference Result 1790 states and 2233 transitions. [2022-11-02 21:00:26,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:00:26,272 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 108 [2022-11-02 21:00:26,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:26,279 INFO L225 Difference]: With dead ends: 1790 [2022-11-02 21:00:26,279 INFO L226 Difference]: Without dead ends: 1186 [2022-11-02 21:00:26,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 137 GetRequests, 129 SyntacticMatches, 3 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:00:26,283 INFO L413 NwaCegarLoop]: 168 mSDtfsCounter, 34 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:26,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 261 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:00:26,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1186 states. [2022-11-02 21:00:26,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1186 to 1176. [2022-11-02 21:00:26,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1176 states, 867 states have (on average 1.2018454440599768) internal successors, (1042), 926 states have internal predecessors, (1042), 162 states have call successors, (162), 146 states have call predecessors, (162), 146 states have return successors, (236), 156 states have call predecessors, (236), 162 states have call successors, (236) [2022-11-02 21:00:26,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1176 states to 1176 states and 1440 transitions. [2022-11-02 21:00:26,392 INFO L78 Accepts]: Start accepts. Automaton has 1176 states and 1440 transitions. Word has length 108 [2022-11-02 21:00:26,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:26,393 INFO L495 AbstractCegarLoop]: Abstraction has 1176 states and 1440 transitions. [2022-11-02 21:00:26,393 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-02 21:00:26,393 INFO L276 IsEmpty]: Start isEmpty. Operand 1176 states and 1440 transitions. [2022-11-02 21:00:26,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-02 21:00:26,399 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:00:26,399 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:26,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 21:00:26,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-02 21:00:26,626 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:00:26,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:00:26,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1331262979, now seen corresponding path program 1 times [2022-11-02 21:00:26,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:00:26,627 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1736887746] [2022-11-02 21:00:26,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:26,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:00:26,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:00:26,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 21:00:26,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 21:00:26,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:00:26,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:26,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-02 21:00:26,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:26,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-02 21:00:26,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-02 21:00:27,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:00:27,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-02 21:00:27,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:00:27,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-02 21:00:27,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,163 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-02 21:00:27,164 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:00:27,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1736887746] [2022-11-02 21:00:27,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1736887746] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:00:27,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [307957393] [2022-11-02 21:00:27,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:00:27,165 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:00:27,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:00:27,166 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:00:27,197 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-02 21:00:27,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:00:27,317 INFO L263 TraceCheckSpWp]: Trace formula consists of 496 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 21:00:27,321 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:00:27,512 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-02 21:00:27,512 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 21:00:27,512 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [307957393] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:00:27,512 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 21:00:27,513 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-11-02 21:00:27,513 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1572101730] [2022-11-02 21:00:27,513 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:00:27,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 21:00:27,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:00:27,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 21:00:27,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2022-11-02 21:00:27,515 INFO L87 Difference]: Start difference. First operand 1176 states and 1440 transitions. Second operand has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-02 21:00:27,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:00:27,766 INFO L93 Difference]: Finished difference Result 2016 states and 2496 transitions. [2022-11-02 21:00:27,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:00:27,767 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 108 [2022-11-02 21:00:27,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:00:27,768 INFO L225 Difference]: With dead ends: 2016 [2022-11-02 21:00:27,769 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 21:00:27,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2022-11-02 21:00:27,775 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 76 mSDsluCounter, 666 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 857 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:00:27,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 857 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:00:27,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 21:00:27,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 21:00:27,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 21:00:27,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 21:00:27,778 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2022-11-02 21:00:27,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:00:27,778 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 21:00:27,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-02 21:00:27,779 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 21:00:27,779 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 21:00:27,782 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 21:00:27,828 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-02 21:00:28,005 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-02 21:00:28,008 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 21:00:35,079 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 818 825) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:00:35,079 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 818 825) no Hoare annotation was computed. [2022-11-02 21:00:35,080 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 818 825) no Hoare annotation was computed. [2022-11-02 21:00:35,080 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 734 740) no Hoare annotation was computed. [2022-11-02 21:00:35,080 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 734 740) the Hoare annotation is: true [2022-11-02 21:00:35,080 INFO L899 garLoopResultBuilder]: For program point L640-1(lines 636 647) no Hoare annotation was computed. [2022-11-02 21:00:35,081 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 636 647) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse2 .cse0 .cse1) (or .cse2 .cse1 (= 0 ~systemActive~0)))) [2022-11-02 21:00:35,081 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 636 647) no Hoare annotation was computed. [2022-11-02 21:00:35,081 INFO L895 garLoopResultBuilder]: At program point L787(line 787) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse9 (not .cse6))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 2 ~waterLevel~0) .cse9)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse9)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6) (or .cse0 .cse1 .cse4) (or .cse7 .cse2 .cse6 .cse8) (or .cse0 .cse7 .cse4 .cse8) (or .cse0 .cse3 .cse2 .cse5) (or .cse1 .cse4 .cse6))))) [2022-11-02 21:00:35,082 INFO L895 garLoopResultBuilder]: At program point L787-1(lines 768 792) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse12 (not .cse11))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and .cse6 .cse12)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and .cse9 .cse10 .cse12)) (.cse2 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse2 .cse5) (or .cse0 .cse7 .cse2 .cse8) (or .cse0 .cse7 .cse4 .cse8) (or .cse0 .cse1 .cse3 .cse4) (or .cse9 .cse10 .cse3 .cse4 .cse11) (or .cse1 (and .cse10 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) .cse2 .cse11))))) [2022-11-02 21:00:35,082 INFO L899 garLoopResultBuilder]: For program point L721-1(lines 721 727) no Hoare annotation was computed. [2022-11-02 21:00:35,082 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 710 733) no Hoare annotation was computed. [2022-11-02 21:00:35,083 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 496) no Hoare annotation was computed. [2022-11-02 21:00:35,083 INFO L899 garLoopResultBuilder]: For program point L482(lines 482 499) no Hoare annotation was computed. [2022-11-02 21:00:35,083 INFO L895 garLoopResultBuilder]: At program point L482-1(lines 474 502) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse13 (not .cse8)) (.cse12 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~3#1| 0))) (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse6 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse12 .cse11)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse11 .cse1 .cse13)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse0 .cse5 .cse4 .cse6) (or .cse7 .cse2 .cse8 .cse9 (and .cse10 .cse11)) (or .cse0 .cse5 .cse2 .cse6) (or .cse0 .cse12 .cse4) (or .cse0 .cse7 .cse2 .cse9) (or (and .cse10 .cse12 .cse13) (and .cse12 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse13) .cse4 .cse8))))) [2022-11-02 21:00:35,084 INFO L895 garLoopResultBuilder]: At program point L842(lines 837 845) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1)) (or .cse0 (and .cse3 .cse4) .cse2) (or .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) (and .cse3 .cse4 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) .cse5) (or .cse1 .cse5))) [2022-11-02 21:00:35,084 INFO L899 garLoopResultBuilder]: For program point L714-1(lines 713 732) no Hoare annotation was computed. [2022-11-02 21:00:35,084 INFO L899 garLoopResultBuilder]: For program point L776(lines 776 784) no Hoare annotation was computed. [2022-11-02 21:00:35,084 INFO L899 garLoopResultBuilder]: For program point L487(lines 487 493) no Hoare annotation was computed. [2022-11-02 21:00:35,085 INFO L899 garLoopResultBuilder]: For program point L772(lines 772 789) no Hoare annotation was computed. [2022-11-02 21:00:35,085 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-02 21:00:35,085 INFO L899 garLoopResultBuilder]: For program point L616(lines 616 620) no Hoare annotation was computed. [2022-11-02 21:00:35,085 INFO L895 garLoopResultBuilder]: At program point L616-2(lines 612 623) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-11-02 21:00:35,086 INFO L895 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse10 (= 0 ~systemActive~0))) (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse6 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (and .cse1 (not .cse10))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6) (or .cse0 .cse7 .cse4) (or .cse0 .cse7 .cse8 .cse2) (or (and .cse7 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) .cse4 (and .cse9 .cse7) .cse10) (or .cse9 .cse7 .cse8 .cse2 .cse10)))) [2022-11-02 21:00:35,086 INFO L899 garLoopResultBuilder]: For program point L480-1(line 480) no Hoare annotation was computed. [2022-11-02 21:00:35,086 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or .cse3 .cse1))) [2022-11-02 21:00:35,087 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 710 733) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse7 (= ~waterLevel~0 1)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse6 .cse1 .cse7) (or .cse0 .cse5 .cse2 .cse3) (or .cse4 .cse6 .cse5 .cse7) (or .cse4 .cse8 .cse1) (or .cse9 .cse1 .cse2) (or .cse4 .cse8 .cse5) (or .cse9 .cse5 .cse2))) [2022-11-02 21:00:35,087 INFO L895 garLoopResultBuilder]: At program point L782(line 782) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse1))) [2022-11-02 21:00:35,087 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 710 733) no Hoare annotation was computed. [2022-11-02 21:00:35,088 INFO L895 garLoopResultBuilder]: At program point L778(line 778) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 (and .cse4 (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (or .cse0 .cse2) (or .cse4 .cse1 .cse3))) [2022-11-02 21:00:35,088 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-02 21:00:35,088 INFO L895 garLoopResultBuilder]: At program point L774(line 774) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-11-02 21:00:35,088 INFO L899 garLoopResultBuilder]: For program point L774-1(line 774) no Hoare annotation was computed. [2022-11-02 21:00:35,089 INFO L902 garLoopResultBuilder]: At program point L512(line 512) the Hoare annotation is: true [2022-11-02 21:00:35,089 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 506 535) no Hoare annotation was computed. [2022-11-02 21:00:35,089 INFO L899 garLoopResultBuilder]: For program point L512-1(line 512) no Hoare annotation was computed. [2022-11-02 21:00:35,089 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 506 535) the Hoare annotation is: true [2022-11-02 21:00:35,090 INFO L902 garLoopResultBuilder]: At program point L531(lines 506 535) the Hoare annotation is: true [2022-11-02 21:00:35,090 INFO L899 garLoopResultBuilder]: For program point L527(line 527) no Hoare annotation was computed. [2022-11-02 21:00:35,090 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 524) no Hoare annotation was computed. [2022-11-02 21:00:35,090 INFO L902 garLoopResultBuilder]: At program point L520-1(lines 520 524) the Hoare annotation is: true [2022-11-02 21:00:35,090 INFO L899 garLoopResultBuilder]: For program point L517(line 517) no Hoare annotation was computed. [2022-11-02 21:00:35,091 INFO L902 garLoopResultBuilder]: At program point L516-2(lines 516 530) the Hoare annotation is: true [2022-11-02 21:00:35,091 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 648 656) the Hoare annotation is: true [2022-11-02 21:00:35,091 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 648 656) no Hoare annotation was computed. [2022-11-02 21:00:35,091 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 648 656) no Hoare annotation was computed. [2022-11-02 21:00:35,091 INFO L902 garLoopResultBuilder]: At program point L601(lines 582 604) the Hoare annotation is: true [2022-11-02 21:00:35,092 INFO L895 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 21:00:35,092 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-11-02 21:00:35,092 INFO L899 garLoopResultBuilder]: For program point L928(lines 927 974) no Hoare annotation was computed. [2022-11-02 21:00:35,092 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 21:00:35,093 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 21:00:35,093 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 970) no Hoare annotation was computed. [2022-11-02 21:00:35,093 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 21:00:35,093 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2) (and .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2022-11-02 21:00:35,094 INFO L902 garLoopResultBuilder]: At program point L978(lines 917 982) the Hoare annotation is: true [2022-11-02 21:00:35,094 INFO L899 garLoopResultBuilder]: For program point L937(lines 937 943) no Hoare annotation was computed. [2022-11-02 21:00:35,094 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 937 943) no Hoare annotation was computed. [2022-11-02 21:00:35,094 INFO L899 garLoopResultBuilder]: For program point L929(lines 929 933) no Hoare annotation was computed. [2022-11-02 21:00:35,094 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 21:00:35,095 INFO L895 garLoopResultBuilder]: At program point L471(lines 466 473) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 21:00:35,095 INFO L895 garLoopResultBuilder]: At program point L913(lines 901 915) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1))) [2022-11-02 21:00:35,095 INFO L895 garLoopResultBuilder]: At program point L975(lines 926 976) the Hoare annotation is: false [2022-11-02 21:00:35,095 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 911) no Hoare annotation was computed. [2022-11-02 21:00:35,095 INFO L899 garLoopResultBuilder]: For program point L905-1(lines 905 911) no Hoare annotation was computed. [2022-11-02 21:00:35,096 INFO L899 garLoopResultBuilder]: For program point L963(lines 963 969) no Hoare annotation was computed. [2022-11-02 21:00:35,096 INFO L902 garLoopResultBuilder]: At program point L579(lines 571 581) the Hoare annotation is: true [2022-11-02 21:00:35,096 INFO L895 garLoopResultBuilder]: At program point L963-2(lines 957 970) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse2) (and .cse3 .cse2 .cse4) (and .cse1 .cse2 .cse4))) [2022-11-02 21:00:35,096 INFO L895 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 21:00:35,097 INFO L895 garLoopResultBuilder]: At program point L567(lines 563 569) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 21:00:35,097 INFO L895 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 21:00:35,097 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2022-11-02 21:00:35,097 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2022-11-02 21:00:35,098 INFO L899 garLoopResultBuilder]: For program point L592(lines 592 599) no Hoare annotation was computed. [2022-11-02 21:00:35,098 INFO L899 garLoopResultBuilder]: For program point L592-2(lines 592 599) no Hoare annotation was computed. [2022-11-02 21:00:35,098 INFO L895 garLoopResultBuilder]: At program point L972(lines 927 974) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2) (and .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2022-11-02 21:00:35,098 INFO L895 garLoopResultBuilder]: At program point L939(line 939) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2) (and .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2022-11-02 21:00:35,098 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 624 635) no Hoare annotation was computed. [2022-11-02 21:00:35,099 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 624 635) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2022-11-02 21:00:35,099 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 624 635) no Hoare annotation was computed. [2022-11-02 21:00:35,099 INFO L895 garLoopResultBuilder]: At program point L698(lines 689 702) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse10 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse11 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse4 .cse6 .cse10 .cse11)) (.cse0 (not .cse11)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse6 .cse10 .cse11)) (.cse5 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6) .cse1 .cse2 .cse3) (or .cse7 .cse8 .cse0 .cse9 .cse3) (or .cse7 .cse8 (and .cse5 .cse6) .cse9 .cse3)))) [2022-11-02 21:00:35,100 INFO L895 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse7 .cse4) (or .cse1 (and .cse5 .cse6) .cse2 .cse4) (or .cse0 .cse7 .cse3 .cse4))) [2022-11-02 21:00:35,100 INFO L899 garLoopResultBuilder]: For program point L750(lines 750 758) no Hoare annotation was computed. [2022-11-02 21:00:35,100 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 763) no Hoare annotation was computed. [2022-11-02 21:00:35,100 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 814) no Hoare annotation was computed. [2022-11-02 21:00:35,101 INFO L895 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1) .cse2))) [2022-11-02 21:00:35,101 INFO L895 garLoopResultBuilder]: At program point L808-2(lines 801 817) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1|) .cse0) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-02 21:00:35,101 INFO L899 garLoopResultBuilder]: For program point L806-1(line 806) no Hoare annotation was computed. [2022-11-02 21:00:35,102 INFO L895 garLoopResultBuilder]: At program point L897(lines 882 900) the Hoare annotation is: (let ((.cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse6 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|)) (.cse8 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse9 (= 0 ~systemActive~0))) (and (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse4 (not .cse9))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (not .cse2) (and .cse5 .cse0 .cse6 .cse1 .cse7 .cse2 .cse8 .cse4) .cse9)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse5 .cse0 .cse6 .cse1 .cse7 .cse8) (and .cse0 .cse1 .cse3) (not (<= 1 ~methaneLevelCritical~0)) .cse9))) [2022-11-02 21:00:35,102 INFO L895 garLoopResultBuilder]: At program point L798(lines 793 800) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-11-02 21:00:35,103 INFO L899 garLoopResultBuilder]: For program point L891(lines 891 895) no Hoare annotation was computed. [2022-11-02 21:00:35,103 INFO L899 garLoopResultBuilder]: For program point L891-2(lines 891 895) no Hoare annotation was computed. [2022-11-02 21:00:35,103 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-02 21:00:35,103 INFO L899 garLoopResultBuilder]: For program point L761-1(lines 742 766) no Hoare annotation was computed. [2022-11-02 21:00:35,104 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-11-02 21:00:35,104 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 742 766) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-11-02 21:00:35,104 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 742 766) no Hoare annotation was computed. [2022-11-02 21:00:35,104 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 826 836) the Hoare annotation is: true [2022-11-02 21:00:35,105 INFO L902 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: true [2022-11-02 21:00:35,105 INFO L899 garLoopResultBuilder]: For program point L831-1(line 831) no Hoare annotation was computed. [2022-11-02 21:00:35,105 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 826 836) no Hoare annotation was computed. [2022-11-02 21:00:35,105 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 826 836) no Hoare annotation was computed. [2022-11-02 21:00:35,109 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:00:35,112 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 21:00:35,142 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 09:00:35 BoogieIcfgContainer [2022-11-02 21:00:35,143 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 21:00:35,143 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 21:00:35,143 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 21:00:35,144 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 21:00:35,144 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:00:17" (3/4) ... [2022-11-02 21:00:35,148 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 21:00:35,156 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 21:00:35,156 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 21:00:35,156 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 21:00:35,156 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 21:00:35,157 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 21:00:35,157 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-02 21:00:35,157 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 21:00:35,158 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:00:35,158 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-02 21:00:35,166 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-11-02 21:00:35,167 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 21:00:35,168 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 21:00:35,168 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 21:00:35,169 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 21:00:35,169 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:00:35,170 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:00:35,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-02 21:00:35,200 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2022-11-02 21:00:35,200 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2022-11-02 21:00:35,201 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 21:00:35,202 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:00:35,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((((pumpRunning == 0 && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive))) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive)))) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && 1 <= tmp) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:00:35,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && (((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((pumpRunning == 0 && \result == 0) && 1 <= tmp)) || 0 == systemActive)) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-11-02 21:00:35,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 21:00:35,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 21:00:35,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= waterLevel) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 2 <= waterLevel)) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 2 <= waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:00:35,205 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-11-02 21:00:35,205 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && \result == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-02 21:00:35,230 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 21:00:35,230 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 21:00:35,231 INFO L158 Benchmark]: Toolchain (without parser) took 19146.62ms. Allocated memory was 144.7MB in the beginning and 278.9MB in the end (delta: 134.2MB). Free memory was 108.3MB in the beginning and 206.7MB in the end (delta: -98.4MB). Peak memory consumption was 35.4MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,231 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 92.3MB. Free memory was 63.3MB in the beginning and 63.3MB in the end (delta: 31.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:00:35,231 INFO L158 Benchmark]: CACSL2BoogieTranslator took 760.53ms. Allocated memory is still 144.7MB. Free memory was 107.9MB in the beginning and 112.5MB in the end (delta: -4.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,232 INFO L158 Benchmark]: Boogie Procedure Inliner took 105.43ms. Allocated memory is still 144.7MB. Free memory was 112.5MB in the beginning and 110.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,232 INFO L158 Benchmark]: Boogie Preprocessor took 61.74ms. Allocated memory is still 144.7MB. Free memory was 110.4MB in the beginning and 108.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,233 INFO L158 Benchmark]: RCFGBuilder took 822.51ms. Allocated memory is still 144.7MB. Free memory was 108.3MB in the beginning and 89.4MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,233 INFO L158 Benchmark]: TraceAbstraction took 17300.52ms. Allocated memory was 144.7MB in the beginning and 278.9MB in the end (delta: 134.2MB). Free memory was 88.8MB in the beginning and 213.1MB in the end (delta: -124.3MB). Peak memory consumption was 135.4MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,234 INFO L158 Benchmark]: Witness Printer took 86.88ms. Allocated memory is still 278.9MB. Free memory was 213.1MB in the beginning and 206.7MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 21:00:35,236 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 92.3MB. Free memory was 63.3MB in the beginning and 63.3MB in the end (delta: 31.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 760.53ms. Allocated memory is still 144.7MB. Free memory was 107.9MB in the beginning and 112.5MB in the end (delta: -4.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 105.43ms. Allocated memory is still 144.7MB. Free memory was 112.5MB in the beginning and 110.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 61.74ms. Allocated memory is still 144.7MB. Free memory was 110.4MB in the beginning and 108.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 822.51ms. Allocated memory is still 144.7MB. Free memory was 108.3MB in the beginning and 89.4MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 17300.52ms. Allocated memory was 144.7MB in the beginning and 278.9MB in the end (delta: 134.2MB). Free memory was 88.8MB in the beginning and 213.1MB in the end (delta: -124.3MB). Peak memory consumption was 135.4MB. Max. memory is 16.1GB. * Witness Printer took 86.88ms. Allocated memory is still 278.9MB. Free memory was 213.1MB in the beginning and 206.7MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.2s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1344 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1318 mSDsluCounter, 4348 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2926 mSDsCounter, 361 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1689 IncrementalHoareTripleChecker+Invalid, 2050 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 361 mSolverCounterUnsat, 1422 mSDtfsCounter, 1689 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 479 GetRequests, 378 SyntacticMatches, 3 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 112 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1176occurred in iteration=10, InterpolantAutomatonStates: 78, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 11 MinimizatonAttempts, 286 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3139 PreInvPairs, 3608 NumberOfFragments, 1917 HoareAnnotationTreeSize, 3139 FomulaSimplifications, 412 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 46 FomulaSimplificationsInter, 20342 FormulaSimplificationTreeSizeReductionInter, 6.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 893 NumberOfCodeBlocks, 893 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 879 ConstructedInterpolants, 0 QuantifiedInterpolants, 1583 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1381 ConjunctsInSsa, 22 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 183/191 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) || ((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) - InvariantResult [Line: 768]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive))) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && (((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((pumpRunning == 0 && \result == 0) && 1 <= tmp)) || 0 == systemActive)) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((((pumpRunning == 0 && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive))) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive)))) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && 1 <= tmp) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 582]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: (((((!(2 <= waterLevel) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 2 <= waterLevel)) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 2 <= waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 882]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && \result == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 563]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) || ((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0)) || ((methaneLevelCritical == 0 && splverifierCounter == 0) && !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-11-02 21:00:35,328 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5637d9-fe58-4818-841c-b29b1ff7b10c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE