./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:42:07,242 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:42:07,249 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:42:07,298 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:42:07,299 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:42:07,304 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:42:07,306 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:42:07,308 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:42:07,310 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:42:07,311 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:42:07,312 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:42:07,313 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:42:07,314 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:42:07,315 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:42:07,316 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:42:07,322 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:42:07,324 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:42:07,334 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:42:07,337 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:42:07,345 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:42:07,347 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:42:07,351 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:42:07,352 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:42:07,353 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:42:07,357 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:42:07,358 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:42:07,358 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:42:07,359 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:42:07,360 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:42:07,363 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:42:07,364 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:42:07,365 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:42:07,367 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:42:07,369 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:42:07,371 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:42:07,371 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:42:07,372 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:42:07,372 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:42:07,372 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:42:07,373 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:42:07,374 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:42:07,377 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 20:42:07,436 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:42:07,436 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:42:07,437 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:42:07,438 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:42:07,439 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:42:07,439 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:42:07,440 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:42:07,440 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:42:07,440 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:42:07,440 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:42:07,442 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:42:07,442 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:42:07,442 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:42:07,442 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:42:07,443 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:42:07,443 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:42:07,443 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:42:07,443 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:42:07,443 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:42:07,444 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:42:07,444 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:42:07,444 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:42:07,444 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:42:07,445 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:42:07,445 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:42:07,445 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:42:07,445 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:42:07,446 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:42:07,446 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:42:07,446 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 20:42:07,446 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:42:07,447 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:42:07,447 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:42:07,447 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a [2022-11-02 20:42:07,844 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:42:07,876 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:42:07,879 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:42:07,881 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:42:07,882 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:42:07,883 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2022-11-02 20:42:07,987 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/data/1e89f54b1/6445557dce1646f6a1b6a550b4dfa036/FLAG7a49521ac [2022-11-02 20:42:08,721 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:42:08,722 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2022-11-02 20:42:08,736 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/data/1e89f54b1/6445557dce1646f6a1b6a550b4dfa036/FLAG7a49521ac [2022-11-02 20:42:08,966 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/data/1e89f54b1/6445557dce1646f6a1b6a550b4dfa036 [2022-11-02 20:42:08,969 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:42:08,971 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:42:08,973 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:42:08,973 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:42:08,979 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:42:08,980 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:42:08" (1/1) ... [2022-11-02 20:42:08,983 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5fb71704 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:08, skipping insertion in model container [2022-11-02 20:42:08,983 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:42:08" (1/1) ... [2022-11-02 20:42:08,993 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:42:09,047 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:42:09,479 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2022-11-02 20:42:09,489 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:42:09,505 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:42:09,636 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2022-11-02 20:42:09,637 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:42:09,657 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:42:09,658 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09 WrapperNode [2022-11-02 20:42:09,658 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:42:09,660 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:42:09,660 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:42:09,660 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:42:09,670 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,706 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,741 INFO L138 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 280 [2022-11-02 20:42:09,742 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:42:09,743 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:42:09,743 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:42:09,743 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:42:09,756 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,757 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,760 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,760 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,767 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,773 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,775 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,777 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,780 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:42:09,781 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:42:09,781 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:42:09,781 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:42:09,782 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (1/1) ... [2022-11-02 20:42:09,791 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:42:09,814 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:42:09,829 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 20:42:09,856 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 20:42:09,893 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:42:09,893 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 20:42:09,893 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 20:42:09,893 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 20:42:09,894 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 20:42:09,894 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 20:42:09,894 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 20:42:09,894 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:42:09,894 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:42:09,895 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 20:42:09,895 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 20:42:09,895 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:42:09,895 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 20:42:09,895 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 20:42:09,895 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:42:09,895 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:42:09,995 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:42:09,998 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:42:10,456 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:42:10,464 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:42:10,465 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 20:42:10,467 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:42:10 BoogieIcfgContainer [2022-11-02 20:42:10,467 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:42:10,470 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 20:42:10,470 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 20:42:10,474 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 20:42:10,475 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:42:08" (1/3) ... [2022-11-02 20:42:10,476 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13fb27ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:42:10, skipping insertion in model container [2022-11-02 20:42:10,476 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:42:09" (2/3) ... [2022-11-02 20:42:10,476 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13fb27ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:42:10, skipping insertion in model container [2022-11-02 20:42:10,477 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:42:10" (3/3) ... [2022-11-02 20:42:10,478 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product57.cil.c [2022-11-02 20:42:10,502 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 20:42:10,502 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 20:42:10,567 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 20:42:10,575 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3ae62681, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 20:42:10,576 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 20:42:10,582 INFO L276 IsEmpty]: Start isEmpty. Operand has 86 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-02 20:42:10,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-02 20:42:10,594 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:10,595 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:10,596 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:10,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:10,603 INFO L85 PathProgramCache]: Analyzing trace with hash -1290449034, now seen corresponding path program 1 times [2022-11-02 20:42:10,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:10,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567333235] [2022-11-02 20:42:10,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:10,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:10,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:10,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:10,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:10,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567333235] [2022-11-02 20:42:10,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567333235] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:10,974 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:10,975 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:42:10,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028664641] [2022-11-02 20:42:10,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:10,985 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 20:42:10,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:11,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 20:42:11,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:42:11,038 INFO L87 Difference]: Start difference. First operand has 86 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:11,092 INFO L93 Difference]: Finished difference Result 164 states and 225 transitions. [2022-11-02 20:42:11,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 20:42:11,095 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-02 20:42:11,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:11,108 INFO L225 Difference]: With dead ends: 164 [2022-11-02 20:42:11,108 INFO L226 Difference]: Without dead ends: 77 [2022-11-02 20:42:11,113 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:42:11,117 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:11,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:42:11,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-02 20:42:11,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-02 20:42:11,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-02 20:42:11,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 100 transitions. [2022-11-02 20:42:11,175 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 100 transitions. Word has length 19 [2022-11-02 20:42:11,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:11,175 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 100 transitions. [2022-11-02 20:42:11,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,176 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 100 transitions. [2022-11-02 20:42:11,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-02 20:42:11,179 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:11,179 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:11,180 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 20:42:11,180 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:11,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:11,181 INFO L85 PathProgramCache]: Analyzing trace with hash -1967581778, now seen corresponding path program 1 times [2022-11-02 20:42:11,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:11,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289535173] [2022-11-02 20:42:11,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:11,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:11,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:11,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:11,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:11,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289535173] [2022-11-02 20:42:11,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289535173] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:11,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:11,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:42:11,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513302113] [2022-11-02 20:42:11,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:11,331 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:42:11,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:11,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:42:11,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:42:11,332 INFO L87 Difference]: Start difference. First operand 77 states and 100 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:11,355 INFO L93 Difference]: Finished difference Result 120 states and 156 transitions. [2022-11-02 20:42:11,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:42:11,356 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-02 20:42:11,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:11,358 INFO L225 Difference]: With dead ends: 120 [2022-11-02 20:42:11,358 INFO L226 Difference]: Without dead ends: 68 [2022-11-02 20:42:11,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:42:11,361 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 12 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:11,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 158 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:42:11,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-02 20:42:11,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2022-11-02 20:42:11,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-02 20:42:11,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 88 transitions. [2022-11-02 20:42:11,376 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 88 transitions. Word has length 20 [2022-11-02 20:42:11,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:11,377 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 88 transitions. [2022-11-02 20:42:11,377 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,378 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 88 transitions. [2022-11-02 20:42:11,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-02 20:42:11,379 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:11,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:11,380 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 20:42:11,380 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:11,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:11,381 INFO L85 PathProgramCache]: Analyzing trace with hash 764053852, now seen corresponding path program 1 times [2022-11-02 20:42:11,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:11,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338940466] [2022-11-02 20:42:11,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:11,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:11,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:11,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:11,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:11,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [338940466] [2022-11-02 20:42:11,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [338940466] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:11,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:11,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:42:11,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [387146403] [2022-11-02 20:42:11,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:11,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:42:11,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:11,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:42:11,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:42:11,686 INFO L87 Difference]: Start difference. First operand 68 states and 88 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:11,830 INFO L93 Difference]: Finished difference Result 129 states and 170 transitions. [2022-11-02 20:42:11,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:42:11,832 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-02 20:42:11,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:11,833 INFO L225 Difference]: With dead ends: 129 [2022-11-02 20:42:11,834 INFO L226 Difference]: Without dead ends: 68 [2022-11-02 20:42:11,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:42:11,839 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 173 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:11,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 189 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:42:11,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-02 20:42:11,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2022-11-02 20:42:11,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-02 20:42:11,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 87 transitions. [2022-11-02 20:42:11,890 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 87 transitions. Word has length 24 [2022-11-02 20:42:11,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:11,890 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 87 transitions. [2022-11-02 20:42:11,890 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:11,891 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 87 transitions. [2022-11-02 20:42:11,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-02 20:42:11,892 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:11,892 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:11,892 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 20:42:11,898 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:11,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:11,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1882395024, now seen corresponding path program 1 times [2022-11-02 20:42:11,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:11,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1597126252] [2022-11-02 20:42:11,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:11,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:11,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:12,004 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:12,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1597126252] [2022-11-02 20:42:12,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1597126252] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:12,006 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:12,006 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:42:12,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1031284962] [2022-11-02 20:42:12,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:12,007 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:42:12,008 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:12,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:42:12,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:42:12,015 INFO L87 Difference]: Start difference. First operand 68 states and 87 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:12,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:12,102 INFO L93 Difference]: Finished difference Result 168 states and 221 transitions. [2022-11-02 20:42:12,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:42:12,103 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-02 20:42:12,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:12,105 INFO L225 Difference]: With dead ends: 168 [2022-11-02 20:42:12,109 INFO L226 Difference]: Without dead ends: 107 [2022-11-02 20:42:12,111 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:42:12,112 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 67 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:12,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 143 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:42:12,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2022-11-02 20:42:12,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 105. [2022-11-02 20:42:12,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 84 states have (on average 1.3095238095238095) internal successors, (110), 92 states have internal predecessors, (110), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2022-11-02 20:42:12,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 134 transitions. [2022-11-02 20:42:12,140 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 134 transitions. Word has length 32 [2022-11-02 20:42:12,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:12,141 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 134 transitions. [2022-11-02 20:42:12,141 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:12,142 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 134 transitions. [2022-11-02 20:42:12,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-02 20:42:12,143 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:12,144 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:12,144 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 20:42:12,144 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:12,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:12,145 INFO L85 PathProgramCache]: Analyzing trace with hash -1383918710, now seen corresponding path program 1 times [2022-11-02 20:42:12,145 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:12,146 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824338785] [2022-11-02 20:42:12,146 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:12,146 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:12,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:42:12,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:42:12,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,314 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:12,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:12,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824338785] [2022-11-02 20:42:12,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824338785] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:12,316 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:12,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:42:12,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406897132] [2022-11-02 20:42:12,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:12,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:42:12,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:12,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:42:12,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:42:12,319 INFO L87 Difference]: Start difference. First operand 105 states and 134 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 20:42:12,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:12,622 INFO L93 Difference]: Finished difference Result 298 states and 395 transitions. [2022-11-02 20:42:12,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:42:12,627 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2022-11-02 20:42:12,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:12,634 INFO L225 Difference]: With dead ends: 298 [2022-11-02 20:42:12,634 INFO L226 Difference]: Without dead ends: 200 [2022-11-02 20:42:12,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-02 20:42:12,645 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 133 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:12,645 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 287 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:42:12,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2022-11-02 20:42:12,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 198. [2022-11-02 20:42:12,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 170 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (32), 18 states have call predecessors, (32), 18 states have call successors, (32) [2022-11-02 20:42:12,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 253 transitions. [2022-11-02 20:42:12,733 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 253 transitions. Word has length 40 [2022-11-02 20:42:12,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:12,733 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 253 transitions. [2022-11-02 20:42:12,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 20:42:12,734 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 253 transitions. [2022-11-02 20:42:12,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-02 20:42:12,736 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:12,736 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:12,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 20:42:12,737 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:12,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:12,746 INFO L85 PathProgramCache]: Analyzing trace with hash 325624560, now seen corresponding path program 1 times [2022-11-02 20:42:12,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:12,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228989243] [2022-11-02 20:42:12,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:12,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:12,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:12,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 20:42:12,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:42:12,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:12,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:12,974 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:12,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228989243] [2022-11-02 20:42:12,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228989243] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:12,974 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:12,974 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:42:12,975 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [59469134] [2022-11-02 20:42:12,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:12,975 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:42:12,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:12,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:42:12,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:42:12,977 INFO L87 Difference]: Start difference. First operand 198 states and 253 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-02 20:42:13,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:13,524 INFO L93 Difference]: Finished difference Result 281 states and 354 transitions. [2022-11-02 20:42:13,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-02 20:42:13,525 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-11-02 20:42:13,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:13,527 INFO L225 Difference]: With dead ends: 281 [2022-11-02 20:42:13,528 INFO L226 Difference]: Without dead ends: 279 [2022-11-02 20:42:13,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 91 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=127, Invalid=335, Unknown=0, NotChecked=0, Total=462 [2022-11-02 20:42:13,529 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 211 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 307 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:13,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [213 Valid, 409 Invalid, 307 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:42:13,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2022-11-02 20:42:13,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 231. [2022-11-02 20:42:13,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 186 states have (on average 1.2580645161290323) internal successors, (234), 202 states have internal predecessors, (234), 20 states have call successors, (20), 18 states have call predecessors, (20), 24 states have return successors, (39), 20 states have call predecessors, (39), 20 states have call successors, (39) [2022-11-02 20:42:13,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 293 transitions. [2022-11-02 20:42:13,601 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 293 transitions. Word has length 44 [2022-11-02 20:42:13,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:13,602 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 293 transitions. [2022-11-02 20:42:13,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-02 20:42:13,603 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 293 transitions. [2022-11-02 20:42:13,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-02 20:42:13,616 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:13,616 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:13,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 20:42:13,616 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:13,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:13,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1024939841, now seen corresponding path program 1 times [2022-11-02 20:42:13,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:13,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605557399] [2022-11-02 20:42:13,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:13,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:13,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:13,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:13,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:13,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 20:42:13,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:13,798 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:13,798 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:13,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605557399] [2022-11-02 20:42:13,799 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605557399] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:13,799 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:13,799 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:42:13,800 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1811205198] [2022-11-02 20:42:13,800 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:13,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:42:13,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:13,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:42:13,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:42:13,802 INFO L87 Difference]: Start difference. First operand 231 states and 293 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:14,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:14,149 INFO L93 Difference]: Finished difference Result 495 states and 653 transitions. [2022-11-02 20:42:14,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:42:14,150 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2022-11-02 20:42:14,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:14,156 INFO L225 Difference]: With dead ends: 495 [2022-11-02 20:42:14,156 INFO L226 Difference]: Without dead ends: 271 [2022-11-02 20:42:14,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:42:14,163 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 140 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:14,164 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 335 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:42:14,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-11-02 20:42:14,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 237. [2022-11-02 20:42:14,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237 states, 192 states have (on average 1.25) internal successors, (240), 208 states have internal predecessors, (240), 20 states have call successors, (20), 18 states have call predecessors, (20), 24 states have return successors, (39), 20 states have call predecessors, (39), 20 states have call successors, (39) [2022-11-02 20:42:14,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237 states to 237 states and 299 transitions. [2022-11-02 20:42:14,225 INFO L78 Accepts]: Start accepts. Automaton has 237 states and 299 transitions. Word has length 46 [2022-11-02 20:42:14,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:14,226 INFO L495 AbstractCegarLoop]: Abstraction has 237 states and 299 transitions. [2022-11-02 20:42:14,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:14,227 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 299 transitions. [2022-11-02 20:42:14,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-02 20:42:14,230 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:14,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:14,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 20:42:14,231 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:14,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:14,232 INFO L85 PathProgramCache]: Analyzing trace with hash -969204865, now seen corresponding path program 1 times [2022-11-02 20:42:14,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:14,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659255727] [2022-11-02 20:42:14,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:14,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:14,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:14,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:14,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:14,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 20:42:14,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:14,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:14,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:14,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659255727] [2022-11-02 20:42:14,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659255727] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:14,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:14,496 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:42:14,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143173520] [2022-11-02 20:42:14,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:14,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 20:42:14,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:14,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:42:14,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:42:14,498 INFO L87 Difference]: Start difference. First operand 237 states and 299 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:14,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:14,846 INFO L93 Difference]: Finished difference Result 463 states and 597 transitions. [2022-11-02 20:42:14,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:42:14,847 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2022-11-02 20:42:14,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:14,849 INFO L225 Difference]: With dead ends: 463 [2022-11-02 20:42:14,849 INFO L226 Difference]: Without dead ends: 233 [2022-11-02 20:42:14,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:42:14,851 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 174 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 307 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:14,852 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 349 Invalid, 307 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:42:14,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2022-11-02 20:42:14,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 182. [2022-11-02 20:42:14,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 146 states have (on average 1.2465753424657535) internal successors, (182), 158 states have internal predecessors, (182), 17 states have call successors, (17), 15 states have call predecessors, (17), 18 states have return successors, (28), 16 states have call predecessors, (28), 17 states have call successors, (28) [2022-11-02 20:42:14,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 227 transitions. [2022-11-02 20:42:14,878 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 227 transitions. Word has length 46 [2022-11-02 20:42:14,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:14,879 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 227 transitions. [2022-11-02 20:42:14,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:14,879 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 227 transitions. [2022-11-02 20:42:14,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-02 20:42:14,880 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:14,880 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:14,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 20:42:14,881 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:14,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:14,881 INFO L85 PathProgramCache]: Analyzing trace with hash -1786853315, now seen corresponding path program 1 times [2022-11-02 20:42:14,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:14,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709065062] [2022-11-02 20:42:14,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:14,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:14,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:14,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:14,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 20:42:15,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,023 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:15,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:15,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709065062] [2022-11-02 20:42:15,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709065062] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:15,025 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:15,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:42:15,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737490818] [2022-11-02 20:42:15,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:15,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:42:15,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:15,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:42:15,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:42:15,029 INFO L87 Difference]: Start difference. First operand 182 states and 227 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:15,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:15,500 INFO L93 Difference]: Finished difference Result 417 states and 553 transitions. [2022-11-02 20:42:15,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-02 20:42:15,501 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2022-11-02 20:42:15,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:15,504 INFO L225 Difference]: With dead ends: 417 [2022-11-02 20:42:15,504 INFO L226 Difference]: Without dead ends: 282 [2022-11-02 20:42:15,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-02 20:42:15,506 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 206 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 438 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:15,506 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 438 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:42:15,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-11-02 20:42:15,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 271. [2022-11-02 20:42:15,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 217 states have (on average 1.2211981566820276) internal successors, (265), 232 states have internal predecessors, (265), 25 states have call successors, (25), 23 states have call predecessors, (25), 28 states have return successors, (54), 27 states have call predecessors, (54), 25 states have call successors, (54) [2022-11-02 20:42:15,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 344 transitions. [2022-11-02 20:42:15,545 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 344 transitions. Word has length 46 [2022-11-02 20:42:15,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:15,559 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 344 transitions. [2022-11-02 20:42:15,559 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:42:15,559 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 344 transitions. [2022-11-02 20:42:15,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-11-02 20:42:15,561 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:15,562 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:15,562 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-02 20:42:15,562 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:15,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:15,563 INFO L85 PathProgramCache]: Analyzing trace with hash 1370841909, now seen corresponding path program 1 times [2022-11-02 20:42:15,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:15,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2057175779] [2022-11-02 20:42:15,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:15,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:15,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:15,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:42:15,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:42:15,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-02 20:42:15,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:42:15,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:15,851 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 11 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-02 20:42:15,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:15,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2057175779] [2022-11-02 20:42:15,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2057175779] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:42:15,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1747860087] [2022-11-02 20:42:15,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:15,852 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:42:15,852 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:42:15,860 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:42:15,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 20:42:15,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:16,003 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-02 20:42:16,010 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:42:16,250 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:42:16,250 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:42:16,452 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-02 20:42:16,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1747860087] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:42:16,453 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:42:16,453 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-11-02 20:42:16,453 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024434377] [2022-11-02 20:42:16,453 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:42:16,455 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-02 20:42:16,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:16,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-02 20:42:16,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:42:16,457 INFO L87 Difference]: Start difference. First operand 271 states and 344 transitions. Second operand has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-02 20:42:17,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:17,330 INFO L93 Difference]: Finished difference Result 636 states and 856 transitions. [2022-11-02 20:42:17,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-02 20:42:17,331 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 80 [2022-11-02 20:42:17,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:17,335 INFO L225 Difference]: With dead ends: 636 [2022-11-02 20:42:17,341 INFO L226 Difference]: Without dead ends: 412 [2022-11-02 20:42:17,343 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 167 SyntacticMatches, 8 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 175 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=214, Invalid=542, Unknown=0, NotChecked=0, Total=756 [2022-11-02 20:42:17,344 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 247 mSDsluCounter, 451 mSDsCounter, 0 mSdLazyCounter, 446 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 446 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:17,345 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 578 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 446 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-02 20:42:17,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2022-11-02 20:42:17,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 365. [2022-11-02 20:42:17,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 365 states, 289 states have (on average 1.2283737024221453) internal successors, (355), 310 states have internal predecessors, (355), 36 states have call successors, (36), 33 states have call predecessors, (36), 39 states have return successors, (82), 36 states have call predecessors, (82), 36 states have call successors, (82) [2022-11-02 20:42:17,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 473 transitions. [2022-11-02 20:42:17,399 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 473 transitions. Word has length 80 [2022-11-02 20:42:17,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:17,402 INFO L495 AbstractCegarLoop]: Abstraction has 365 states and 473 transitions. [2022-11-02 20:42:17,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-02 20:42:17,402 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 473 transitions. [2022-11-02 20:42:17,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2022-11-02 20:42:17,404 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:17,405 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:17,452 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:42:17,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:42:17,629 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:17,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:17,629 INFO L85 PathProgramCache]: Analyzing trace with hash -2051063763, now seen corresponding path program 2 times [2022-11-02 20:42:17,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:17,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [162326682] [2022-11-02 20:42:17,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:17,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:17,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:17,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:17,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:17,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:42:17,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:17,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:42:17,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:17,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 20:42:17,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:18,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:42:18,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:18,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:42:18,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:18,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-11-02 20:42:18,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:18,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:42:18,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:18,137 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-02 20:42:18,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:18,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [162326682] [2022-11-02 20:42:18,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [162326682] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:42:18,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1346692315] [2022-11-02 20:42:18,138 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-02 20:42:18,138 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:42:18,138 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:42:18,139 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:42:18,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 20:42:18,310 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-02 20:42:18,310 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-02 20:42:18,313 INFO L263 TraceCheckSpWp]: Trace formula consists of 519 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-02 20:42:18,317 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:42:18,509 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-02 20:42:18,510 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:42:18,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1346692315] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:18,510 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:42:18,510 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-11-02 20:42:18,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [354307707] [2022-11-02 20:42:18,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:18,511 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:42:18,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:18,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:42:18,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-11-02 20:42:18,513 INFO L87 Difference]: Start difference. First operand 365 states and 473 transitions. Second operand has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-02 20:42:18,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:18,912 INFO L93 Difference]: Finished difference Result 1004 states and 1357 transitions. [2022-11-02 20:42:18,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-02 20:42:18,913 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 114 [2022-11-02 20:42:18,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:18,918 INFO L225 Difference]: With dead ends: 1004 [2022-11-02 20:42:18,918 INFO L226 Difference]: Without dead ends: 685 [2022-11-02 20:42:18,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 127 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2022-11-02 20:42:18,921 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 203 mSDsluCounter, 432 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 570 SdHoareTripleChecker+Invalid, 153 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:18,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 570 Invalid, 153 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:42:18,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2022-11-02 20:42:19,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 616. [2022-11-02 20:42:19,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 489 states have (on average 1.2229038854805725) internal successors, (598), 518 states have internal predecessors, (598), 61 states have call successors, (61), 58 states have call predecessors, (61), 65 states have return successors, (123), 63 states have call predecessors, (123), 61 states have call successors, (123) [2022-11-02 20:42:19,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 782 transitions. [2022-11-02 20:42:19,050 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 782 transitions. Word has length 114 [2022-11-02 20:42:19,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:19,050 INFO L495 AbstractCegarLoop]: Abstraction has 616 states and 782 transitions. [2022-11-02 20:42:19,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-02 20:42:19,051 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 782 transitions. [2022-11-02 20:42:19,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2022-11-02 20:42:19,053 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:42:19,054 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:19,102 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:42:19,272 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:42:19,272 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:42:19,273 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:42:19,273 INFO L85 PathProgramCache]: Analyzing trace with hash -1607163089, now seen corresponding path program 1 times [2022-11-02 20:42:19,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:42:19,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79396474] [2022-11-02 20:42:19,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:42:19,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:42:19,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-02 20:42:19,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:42:19,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:42:19,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 20:42:19,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:42:19,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:42:19,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-11-02 20:42:19,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:42:19,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:42:19,530 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-02 20:42:19,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:42:19,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79396474] [2022-11-02 20:42:19,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [79396474] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:42:19,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:42:19,531 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-02 20:42:19,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [561367078] [2022-11-02 20:42:19,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:42:19,532 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-02 20:42:19,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:42:19,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-02 20:42:19,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:42:19,533 INFO L87 Difference]: Start difference. First operand 616 states and 782 transitions. Second operand has 10 states, 10 states have (on average 8.0) internal successors, (80), 7 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 20:42:19,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:42:19,934 INFO L93 Difference]: Finished difference Result 857 states and 1071 transitions. [2022-11-02 20:42:19,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-02 20:42:19,935 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.0) internal successors, (80), 7 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 114 [2022-11-02 20:42:19,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:42:19,936 INFO L225 Difference]: With dead ends: 857 [2022-11-02 20:42:19,936 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 20:42:19,939 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2022-11-02 20:42:19,939 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 148 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 335 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:42:19,940 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 365 Invalid, 335 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:42:19,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 20:42:19,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 20:42:19,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:42:19,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 20:42:19,942 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 114 [2022-11-02 20:42:19,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:42:19,942 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:42:19,942 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.0) internal successors, (80), 7 states have internal predecessors, (80), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 20:42:19,942 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 20:42:19,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 20:42:19,946 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 20:42:19,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-02 20:42:19,949 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 20:42:23,702 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 156 162) no Hoare annotation was computed. [2022-11-02 20:42:23,703 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 156 162) the Hoare annotation is: true [2022-11-02 20:42:23,703 INFO L899 garLoopResultBuilder]: For program point L402-1(lines 398 409) no Hoare annotation was computed. [2022-11-02 20:42:23,703 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 398 409) the Hoare annotation is: true [2022-11-02 20:42:23,703 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 398 409) no Hoare annotation was computed. [2022-11-02 20:42:23,703 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 514 543) no Hoare annotation was computed. [2022-11-02 20:42:23,703 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 514 543) the Hoare annotation is: true [2022-11-02 20:42:23,703 INFO L902 garLoopResultBuilder]: At program point L539(lines 514 543) the Hoare annotation is: true [2022-11-02 20:42:23,703 INFO L899 garLoopResultBuilder]: For program point L535(line 535) no Hoare annotation was computed. [2022-11-02 20:42:23,703 INFO L899 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2022-11-02 20:42:23,704 INFO L902 garLoopResultBuilder]: At program point L528-1(lines 528 532) the Hoare annotation is: true [2022-11-02 20:42:23,704 INFO L899 garLoopResultBuilder]: For program point L525(line 525) no Hoare annotation was computed. [2022-11-02 20:42:23,704 INFO L902 garLoopResultBuilder]: At program point L524-2(lines 524 538) the Hoare annotation is: true [2022-11-02 20:42:23,704 INFO L902 garLoopResultBuilder]: At program point L520(line 520) the Hoare annotation is: true [2022-11-02 20:42:23,704 INFO L899 garLoopResultBuilder]: For program point L520-1(line 520) no Hoare annotation was computed. [2022-11-02 20:42:23,704 INFO L899 garLoopResultBuilder]: For program point L378(lines 378 382) no Hoare annotation was computed. [2022-11-02 20:42:23,705 INFO L895 garLoopResultBuilder]: At program point L378-2(lines 374 385) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,705 INFO L895 garLoopResultBuilder]: At program point L246(lines 241 248) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= |timeShift_isLowWaterLevel_#res#1| 0)) (= ~pumpRunning~0 0) (not (= |timeShift_processEnvironment_~tmp~2#1| 0)) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,706 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,706 INFO L895 garLoopResultBuilder]: At program point L209-1(lines 190 214) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1) .cse2 (not (<= 1 |old(~waterLevel~0)|)) (and .cse3 .cse1))) (or .cse2 .cse3 (and (not (= |timeShift_isLowWaterLevel_#res#1| 0)) .cse0 (not (= |timeShift_processEnvironment_~tmp~2#1| 0)) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,706 INFO L899 garLoopResultBuilder]: For program point L143-1(lines 143 149) no Hoare annotation was computed. [2022-11-02 20:42:23,706 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 337) no Hoare annotation was computed. [2022-11-02 20:42:23,706 INFO L899 garLoopResultBuilder]: For program point L333-2(lines 333 337) no Hoare annotation was computed. [2022-11-02 20:42:23,706 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 132 155) no Hoare annotation was computed. [2022-11-02 20:42:23,706 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 364) no Hoare annotation was computed. [2022-11-02 20:42:23,707 INFO L899 garLoopResultBuilder]: For program point L354(lines 354 367) no Hoare annotation was computed. [2022-11-02 20:42:23,707 INFO L895 garLoopResultBuilder]: At program point L354-1(lines 346 370) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|)) (.cse3 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse5 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 1) (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or (and (<= 2 ~waterLevel~0) .cse2 .cse3) .cse1 (and (not (= |timeShift_isLowWaterLevel_#res#1| 0)) .cse5 (not (= |timeShift_processEnvironment_~tmp~2#1| 0)) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4))) [2022-11-02 20:42:23,707 INFO L895 garLoopResultBuilder]: At program point L470(lines 465 473) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,708 INFO L899 garLoopResultBuilder]: For program point L136-1(lines 135 154) no Hoare annotation was computed. [2022-11-02 20:42:23,708 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 206) no Hoare annotation was computed. [2022-11-02 20:42:23,708 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2022-11-02 20:42:23,708 INFO L895 garLoopResultBuilder]: At program point L339(lines 324 342) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= |timeShift_isLowWaterLevel_#res#1| 0)) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,708 INFO L899 garLoopResultBuilder]: For program point L979(line 979) no Hoare annotation was computed. [2022-11-02 20:42:23,709 INFO L895 garLoopResultBuilder]: At program point L265(lines 260 268) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,709 INFO L895 garLoopResultBuilder]: At program point L447(lines 442 450) the Hoare annotation is: (let ((.cse1 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and (<= 2 ~waterLevel~0) .cse1) (and (not (= |timeShift_isLowWaterLevel_#res#1| 0)) .cse2 (not (= |timeShift_processEnvironment_~tmp~2#1| 0)) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3) (or .cse4 .cse0 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse2 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-11-02 20:42:23,709 INFO L895 garLoopResultBuilder]: At program point L980(lines 975 982) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,709 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 132 155) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,710 INFO L895 garLoopResultBuilder]: At program point L204(line 204) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,710 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 132 155) no Hoare annotation was computed. [2022-11-02 20:42:23,710 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 979) no Hoare annotation was computed. [2022-11-02 20:42:23,710 INFO L895 garLoopResultBuilder]: At program point L572(lines 568 574) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2022-11-02 20:42:23,710 INFO L895 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2022-11-02 20:42:23,710 INFO L899 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2022-11-02 20:42:23,710 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 20:42:23,711 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 105) no Hoare annotation was computed. [2022-11-02 20:42:23,711 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 20:42:23,711 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 20:42:23,717 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2022-11-02 20:42:23,718 INFO L895 garLoopResultBuilder]: At program point L107(lines 64 109) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2022-11-02 20:42:23,718 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2022-11-02 20:42:23,718 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2022-11-02 20:42:23,718 INFO L902 garLoopResultBuilder]: At program point L582(lines 575 584) the Hoare annotation is: true [2022-11-02 20:42:23,718 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-02 20:42:23,719 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 20:42:23,719 INFO L895 garLoopResultBuilder]: At program point L508(lines 503 511) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:42:23,719 INFO L895 garLoopResultBuilder]: At program point L500(lines 496 502) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:42:23,719 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 602) no Hoare annotation was computed. [2022-11-02 20:42:23,719 INFO L899 garLoopResultBuilder]: For program point L595-2(lines 595 602) no Hoare annotation was computed. [2022-11-02 20:42:23,720 INFO L899 garLoopResultBuilder]: For program point L100(lines 100 104) no Hoare annotation was computed. [2022-11-02 20:42:23,720 INFO L895 garLoopResultBuilder]: At program point L100-2(lines 94 105) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2022-11-02 20:42:23,720 INFO L902 garLoopResultBuilder]: At program point L604(lines 585 607) the Hoare annotation is: true [2022-11-02 20:42:23,720 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-11-02 20:42:23,720 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-11-02 20:42:23,721 INFO L902 garLoopResultBuilder]: At program point L113(lines 54 117) the Hoare annotation is: true [2022-11-02 20:42:23,721 INFO L895 garLoopResultBuilder]: At program point L493(lines 489 495) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:42:23,721 INFO L895 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2022-11-02 20:42:23,721 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 164 188) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-02 20:42:23,722 INFO L895 garLoopResultBuilder]: At program point L320(lines 305 323) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))))) [2022-11-02 20:42:23,722 INFO L895 garLoopResultBuilder]: At program point L256(lines 249 259) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 2 ~waterLevel~0))))) [2022-11-02 20:42:23,722 INFO L895 garLoopResultBuilder]: At program point L415(lines 410 418) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 2 ~waterLevel~0))))) [2022-11-02 20:42:23,723 INFO L899 garLoopResultBuilder]: For program point L314(lines 314 318) no Hoare annotation was computed. [2022-11-02 20:42:23,723 INFO L899 garLoopResultBuilder]: For program point L314-2(lines 314 318) no Hoare annotation was computed. [2022-11-02 20:42:23,723 INFO L895 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) .cse2) .cse3) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (and .cse1 .cse2)))) [2022-11-02 20:42:23,723 INFO L899 garLoopResultBuilder]: For program point L172(lines 172 180) no Hoare annotation was computed. [2022-11-02 20:42:23,724 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 185) no Hoare annotation was computed. [2022-11-02 20:42:23,725 INFO L899 garLoopResultBuilder]: For program point L455(lines 455 461) no Hoare annotation was computed. [2022-11-02 20:42:23,726 INFO L895 garLoopResultBuilder]: At program point L220(lines 215 222) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2022-11-02 20:42:23,726 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 164 188) no Hoare annotation was computed. [2022-11-02 20:42:23,728 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-02 20:42:23,729 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 164 188) no Hoare annotation was computed. [2022-11-02 20:42:23,729 INFO L895 garLoopResultBuilder]: At program point L460(lines 451 464) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 1 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1))) [2022-11-02 20:42:23,729 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2022-11-02 20:42:23,730 INFO L895 garLoopResultBuilder]: At program point L231-2(lines 224 240) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2022-11-02 20:42:23,730 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 386 397) no Hoare annotation was computed. [2022-11-02 20:42:23,730 INFO L899 garLoopResultBuilder]: For program point L390-1(lines 386 397) no Hoare annotation was computed. [2022-11-02 20:42:23,731 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 386 397) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-02 20:42:23,735 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:42:23,738 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 20:42:23,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:42:23 BoogieIcfgContainer [2022-11-02 20:42:23,768 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 20:42:23,769 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:42:23,769 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:42:23,769 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:42:23,770 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:42:10" (3/4) ... [2022-11-02 20:42:23,774 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 20:42:23,782 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 20:42:23,782 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 20:42:23,782 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 20:42:23,783 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 20:42:23,783 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:42:23,783 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 20:42:23,791 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-11-02 20:42:23,792 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 20:42:23,793 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 20:42:23,793 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 20:42:23,794 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 20:42:23,794 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:42:23,795 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:42:23,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-02 20:42:23,827 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-11-02 20:42:23,827 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) || ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-11-02 20:42:23,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) && (((!(1 == systemActive) || 2 <= waterLevel) || ((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || (2 <= waterLevel && 2 <= \result)) || (((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) [2022-11-02 20:42:23,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && \result == 1))) && (((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || !(1 == systemActive)) || ((((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) [2022-11-02 20:42:23,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\result == 0)) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-11-02 20:42:23,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) [2022-11-02 20:42:23,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((\result == 0 && !(\result == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) [2022-11-02 20:42:23,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) [2022-11-02 20:42:23,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) [2022-11-02 20:42:23,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) [2022-11-02 20:42:23,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) [2022-11-02 20:42:23,859 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 20:42:23,860 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:42:23,860 INFO L158 Benchmark]: Toolchain (without parser) took 14889.82ms. Allocated memory was 117.4MB in the beginning and 234.9MB in the end (delta: 117.4MB). Free memory was 79.1MB in the beginning and 182.8MB in the end (delta: -103.6MB). Peak memory consumption was 13.2MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,861 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 117.4MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:42:23,861 INFO L158 Benchmark]: CACSL2BoogieTranslator took 685.70ms. Allocated memory is still 117.4MB. Free memory was 79.0MB in the beginning and 84.0MB in the end (delta: -5.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,861 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.48ms. Allocated memory is still 117.4MB. Free memory was 84.0MB in the beginning and 81.3MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,862 INFO L158 Benchmark]: Boogie Preprocessor took 37.35ms. Allocated memory is still 117.4MB. Free memory was 81.3MB in the beginning and 79.8MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,862 INFO L158 Benchmark]: RCFGBuilder took 686.85ms. Allocated memory is still 117.4MB. Free memory was 79.5MB in the beginning and 60.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,863 INFO L158 Benchmark]: TraceAbstraction took 13298.39ms. Allocated memory was 117.4MB in the beginning and 234.9MB in the end (delta: 117.4MB). Free memory was 60.0MB in the beginning and 189.1MB in the end (delta: -129.1MB). Peak memory consumption was 108.4MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,863 INFO L158 Benchmark]: Witness Printer took 90.95ms. Allocated memory is still 234.9MB. Free memory was 188.0MB in the beginning and 182.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-02 20:42:23,865 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 117.4MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 685.70ms. Allocated memory is still 117.4MB. Free memory was 79.0MB in the beginning and 84.0MB in the end (delta: -5.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.48ms. Allocated memory is still 117.4MB. Free memory was 84.0MB in the beginning and 81.3MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 37.35ms. Allocated memory is still 117.4MB. Free memory was 81.3MB in the beginning and 79.8MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 686.85ms. Allocated memory is still 117.4MB. Free memory was 79.5MB in the beginning and 60.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13298.39ms. Allocated memory was 117.4MB in the beginning and 234.9MB in the end (delta: 117.4MB). Free memory was 60.0MB in the beginning and 189.1MB in the end (delta: -129.1MB). Peak memory consumption was 108.4MB. Max. memory is 16.1GB. * Witness Printer took 90.95ms. Allocated memory is still 234.9MB. Free memory was 188.0MB in the beginning and 182.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 979]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 86 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 4.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1729 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1714 mSDsluCounter, 3930 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2770 mSDsCounter, 393 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2037 IncrementalHoareTripleChecker+Invalid, 2430 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 393 mSolverCounterUnsat, 1160 mSDtfsCounter, 2037 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 498 GetRequests, 357 SyntacticMatches, 11 SemanticMatches, 130 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 399 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=616occurred in iteration=11, InterpolantAutomatonStates: 126, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 264 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1198 PreInvPairs, 1324 NumberOfFragments, 1002 HoareAnnotationTreeSize, 1198 FomulaSimplifications, 1995 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 41 FomulaSimplificationsInter, 15108 FormulaSimplificationTreeSizeReductionInter, 2.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.0s InterpolantComputationTime, 819 NumberOfCodeBlocks, 819 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 884 ConstructedInterpolants, 0 QuantifiedInterpolants, 1648 SizeOfPredicates, 8 NumberOfNonLiveVariables, 955 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 252/282 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || (2 <= waterLevel && 2 <= \result)) || (((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\result == 0)) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((\result == 0 && !(\result == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 524]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 190]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) && (((!(1 == systemActive) || 2 <= waterLevel) || ((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && \result == 1))) && (((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || !(1 == systemActive)) || ((((((!(\result == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) || ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) RESULT: Ultimate proved your program to be correct! [2022-11-02 20:42:23,925 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_00a18331-818e-4ec9-a5e0-18e26c4325a9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE