./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 11:57:51,039 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 11:57:51,042 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 11:57:51,085 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 11:57:51,085 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 11:57:51,087 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 11:57:51,089 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 11:57:51,090 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 11:57:51,092 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 11:57:51,093 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 11:57:51,094 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 11:57:51,095 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 11:57:51,095 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 11:57:51,096 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 11:57:51,097 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 11:57:51,098 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 11:57:51,103 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 11:57:51,108 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 11:57:51,111 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 11:57:51,118 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 11:57:51,122 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 11:57:51,124 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 11:57:51,128 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 11:57:51,128 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 11:57:51,136 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 11:57:51,137 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 11:57:51,137 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 11:57:51,139 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 11:57:51,139 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 11:57:51,140 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 11:57:51,140 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 11:57:51,141 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 11:57:51,143 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 11:57:51,145 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 11:57:51,146 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 11:57:51,147 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 11:57:51,147 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 11:57:51,147 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 11:57:51,148 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 11:57:51,148 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 11:57:51,149 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 11:57:51,150 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-16 11:57:51,184 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 11:57:51,185 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 11:57:51,185 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 11:57:51,185 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 11:57:51,186 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 11:57:51,187 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 11:57:51,187 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 11:57:51,188 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 11:57:51,188 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 11:57:51,188 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 11:57:51,189 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 11:57:51,189 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 11:57:51,190 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 11:57:51,190 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 11:57:51,190 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 11:57:51,190 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 11:57:51,191 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 11:57:51,191 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 11:57:51,191 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 11:57:51,191 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 11:57:51,192 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 11:57:51,192 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 11:57:51,192 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 11:57:51,192 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 11:57:51,193 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:57:51,193 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 11:57:51,194 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 11:57:51,195 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 11:57:51,195 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 11:57:51,195 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 11:57:51,195 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 11:57:51,196 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 11:57:51,196 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 11:57:51,196 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2022-11-16 11:57:51,464 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 11:57:51,499 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 11:57:51,502 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 11:57:51,503 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 11:57:51,504 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 11:57:51,505 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-11-16 11:57:51,586 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/data/7f9c7ea4c/3149203f92f1424eb6f7ce4bc6590e52/FLAG35c18a945 [2022-11-16 11:57:52,091 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 11:57:52,092 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-11-16 11:57:52,103 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/data/7f9c7ea4c/3149203f92f1424eb6f7ce4bc6590e52/FLAG35c18a945 [2022-11-16 11:57:52,426 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/data/7f9c7ea4c/3149203f92f1424eb6f7ce4bc6590e52 [2022-11-16 11:57:52,429 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 11:57:52,430 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 11:57:52,432 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 11:57:52,432 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 11:57:52,435 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 11:57:52,436 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:52,437 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@19cbcdf8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52, skipping insertion in model container [2022-11-16 11:57:52,438 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:52,452 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 11:57:52,514 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:57:52,822 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-11-16 11:57:52,844 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:57:52,852 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 11:57:52,903 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-11-16 11:57:52,916 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:57:52,949 INFO L208 MainTranslator]: Completed translation [2022-11-16 11:57:52,949 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52 WrapperNode [2022-11-16 11:57:52,949 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 11:57:52,950 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 11:57:52,951 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 11:57:52,951 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 11:57:52,959 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:52,982 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,013 INFO L138 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2022-11-16 11:57:53,014 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 11:57:53,014 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 11:57:53,015 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 11:57:53,015 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 11:57:53,024 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,024 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,026 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,027 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,032 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,043 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,045 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,060 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,062 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 11:57:53,063 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 11:57:53,063 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 11:57:53,063 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 11:57:53,064 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (1/1) ... [2022-11-16 11:57:53,070 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:57:53,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:57:53,116 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 11:57:53,147 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 11:57:53,172 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 11:57:53,172 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 11:57:53,172 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 11:57:53,172 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 11:57:53,173 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 11:57:53,173 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 11:57:53,173 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 11:57:53,174 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 11:57:53,175 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 11:57:53,176 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 11:57:53,176 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 11:57:53,176 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 11:57:53,176 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 11:57:53,177 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-16 11:57:53,177 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-16 11:57:53,177 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 11:57:53,177 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 11:57:53,177 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 11:57:53,178 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 11:57:53,178 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 11:57:53,264 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 11:57:53,267 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 11:57:53,685 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 11:57:53,693 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 11:57:53,693 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 11:57:53,695 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:57:53 BoogieIcfgContainer [2022-11-16 11:57:53,695 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 11:57:53,698 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 11:57:53,698 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 11:57:53,705 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 11:57:53,705 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 11:57:52" (1/3) ... [2022-11-16 11:57:53,706 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c50897d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:57:53, skipping insertion in model container [2022-11-16 11:57:53,706 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:57:52" (2/3) ... [2022-11-16 11:57:53,707 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c50897d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:57:53, skipping insertion in model container [2022-11-16 11:57:53,707 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:57:53" (3/3) ... [2022-11-16 11:57:53,708 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2022-11-16 11:57:53,728 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 11:57:53,728 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 11:57:53,810 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 11:57:53,816 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3a0f178d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 11:57:53,816 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 11:57:53,824 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-16 11:57:53,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-16 11:57:53,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:53,837 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:53,838 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:53,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:53,844 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2022-11-16 11:57:53,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:53,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3379644] [2022-11-16 11:57:53,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:53,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:54,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:57:54,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:54,106 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:54,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3379644] [2022-11-16 11:57:54,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3379644] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:54,108 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:54,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:57:54,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1581021581] [2022-11-16 11:57:54,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:54,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 11:57:54,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:54,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 11:57:54,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:57:54,144 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:54,178 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2022-11-16 11:57:54,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 11:57:54,181 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-16 11:57:54,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:54,189 INFO L225 Difference]: With dead ends: 190 [2022-11-16 11:57:54,190 INFO L226 Difference]: Without dead ends: 90 [2022-11-16 11:57:54,193 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:57:54,197 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:54,198 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:57:54,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-11-16 11:57:54,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-11-16 11:57:54,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-16 11:57:54,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2022-11-16 11:57:54,242 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2022-11-16 11:57:54,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:54,243 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2022-11-16 11:57:54,243 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,243 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2022-11-16 11:57:54,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-16 11:57:54,245 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:54,246 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:54,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 11:57:54,246 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:54,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:54,247 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2022-11-16 11:57:54,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:54,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350693987] [2022-11-16 11:57:54,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:54,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:54,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 11:57:54,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,492 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:54,493 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:54,493 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350693987] [2022-11-16 11:57:54,493 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350693987] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:54,493 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:54,493 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:57:54,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [323865855] [2022-11-16 11:57:54,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:54,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:57:54,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:54,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:57:54,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:57:54,496 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:54,516 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2022-11-16 11:57:54,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:57:54,517 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-16 11:57:54,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:54,519 INFO L225 Difference]: With dead ends: 141 [2022-11-16 11:57:54,519 INFO L226 Difference]: Without dead ends: 81 [2022-11-16 11:57:54,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:57:54,521 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:54,522 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:57:54,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-16 11:57:54,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-11-16 11:57:54,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 11:57:54,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2022-11-16 11:57:54,533 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2022-11-16 11:57:54,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:54,533 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2022-11-16 11:57:54,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,534 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-11-16 11:57:54,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-16 11:57:54,535 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:54,535 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:54,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 11:57:54,536 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:54,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:54,536 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2022-11-16 11:57:54,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:54,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844770806] [2022-11-16 11:57:54,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:54,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:54,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:57:54,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:54,717 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:54,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844770806] [2022-11-16 11:57:54,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844770806] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:54,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:54,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:57:54,718 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2075950075] [2022-11-16 11:57:54,718 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:54,718 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:57:54,718 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:54,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:57:54,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:57:54,720 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:54,819 INFO L93 Difference]: Finished difference Result 197 states and 256 transitions. [2022-11-16 11:57:54,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 11:57:54,820 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-11-16 11:57:54,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:54,821 INFO L225 Difference]: With dead ends: 197 [2022-11-16 11:57:54,822 INFO L226 Difference]: Without dead ends: 123 [2022-11-16 11:57:54,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:57:54,824 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 167 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:54,824 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 348 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:57:54,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-11-16 11:57:54,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2022-11-16 11:57:54,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 91 states have (on average 1.3406593406593406) internal successors, (122), 102 states have internal predecessors, (122), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-11-16 11:57:54,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 155 transitions. [2022-11-16 11:57:54,844 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 155 transitions. Word has length 29 [2022-11-16 11:57:54,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:54,844 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 155 transitions. [2022-11-16 11:57:54,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:54,844 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 155 transitions. [2022-11-16 11:57:54,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-16 11:57:54,846 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:54,846 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:54,846 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 11:57:54,847 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:54,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:54,847 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2022-11-16 11:57:54,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:54,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1074936057] [2022-11-16 11:57:54,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:54,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:54,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:54,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:57:54,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:55,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:55,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:55,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1074936057] [2022-11-16 11:57:55,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1074936057] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:55,021 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:55,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:57:55,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534405519] [2022-11-16 11:57:55,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:55,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:57:55,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:55,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:57:55,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:57:55,025 INFO L87 Difference]: Start difference. First operand 120 states and 155 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:55,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:55,216 INFO L93 Difference]: Finished difference Result 346 states and 458 transitions. [2022-11-16 11:57:55,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:57:55,217 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-16 11:57:55,218 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:55,226 INFO L225 Difference]: With dead ends: 346 [2022-11-16 11:57:55,226 INFO L226 Difference]: Without dead ends: 233 [2022-11-16 11:57:55,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-16 11:57:55,237 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 76 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:55,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 509 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:57:55,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2022-11-16 11:57:55,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 227. [2022-11-16 11:57:55,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 170 states have (on average 1.3294117647058823) internal successors, (226), 191 states have internal predecessors, (226), 32 states have call successors, (32), 24 states have call predecessors, (32), 24 states have return successors, (36), 24 states have call predecessors, (36), 32 states have call successors, (36) [2022-11-16 11:57:55,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 294 transitions. [2022-11-16 11:57:55,307 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 294 transitions. Word has length 32 [2022-11-16 11:57:55,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:55,309 INFO L495 AbstractCegarLoop]: Abstraction has 227 states and 294 transitions. [2022-11-16 11:57:55,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:57:55,309 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 294 transitions. [2022-11-16 11:57:55,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-16 11:57:55,318 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:55,318 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:55,319 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 11:57:55,319 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:55,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:55,320 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2022-11-16 11:57:55,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:55,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1660118599] [2022-11-16 11:57:55,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:55,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:55,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:55,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:57:55,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:55,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-16 11:57:55,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:55,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:55,510 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:55,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1660118599] [2022-11-16 11:57:55,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1660118599] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:55,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:55,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:57:55,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [698859197] [2022-11-16 11:57:55,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:55,518 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:57:55,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:55,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:57:55,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:57:55,525 INFO L87 Difference]: Start difference. First operand 227 states and 294 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 11:57:55,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:55,868 INFO L93 Difference]: Finished difference Result 528 states and 702 transitions. [2022-11-16 11:57:55,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:57:55,869 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-11-16 11:57:55,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:55,873 INFO L225 Difference]: With dead ends: 528 [2022-11-16 11:57:55,873 INFO L226 Difference]: Without dead ends: 308 [2022-11-16 11:57:55,876 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-16 11:57:55,881 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 131 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:55,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 148 Invalid, 344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:57:55,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-11-16 11:57:55,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 297. [2022-11-16 11:57:55,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 224 states have (on average 1.2723214285714286) internal successors, (285), 245 states have internal predecessors, (285), 38 states have call successors, (38), 34 states have call predecessors, (38), 34 states have return successors, (53), 36 states have call predecessors, (53), 38 states have call successors, (53) [2022-11-16 11:57:55,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 376 transitions. [2022-11-16 11:57:55,948 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 376 transitions. Word has length 36 [2022-11-16 11:57:55,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:55,948 INFO L495 AbstractCegarLoop]: Abstraction has 297 states and 376 transitions. [2022-11-16 11:57:55,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 11:57:55,949 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 376 transitions. [2022-11-16 11:57:55,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-16 11:57:55,953 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:55,954 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:55,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 11:57:55,954 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:55,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:55,955 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2022-11-16 11:57:55,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:55,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1931482456] [2022-11-16 11:57:55,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:55,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:55,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:57:56,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:57:56,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:56,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-16 11:57:56,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,147 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:57:56,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:56,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1931482456] [2022-11-16 11:57:56,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1931482456] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:56,148 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:56,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:57:56,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251960716] [2022-11-16 11:57:56,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:56,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:57:56,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:56,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:57:56,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:57:56,151 INFO L87 Difference]: Start difference. First operand 297 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:56,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:56,558 INFO L93 Difference]: Finished difference Result 645 states and 837 transitions. [2022-11-16 11:57:56,559 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:57:56,559 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-11-16 11:57:56,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:56,565 INFO L225 Difference]: With dead ends: 645 [2022-11-16 11:57:56,565 INFO L226 Difference]: Without dead ends: 355 [2022-11-16 11:57:56,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:57:56,569 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 136 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 398 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:56,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 166 Invalid, 398 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:57:56,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-11-16 11:57:56,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 343. [2022-11-16 11:57:56,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2461538461538462) internal successors, (324), 281 states have internal predecessors, (324), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (63), 44 states have call predecessors, (63), 42 states have call successors, (63) [2022-11-16 11:57:56,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 429 transitions. [2022-11-16 11:57:56,623 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 429 transitions. Word has length 55 [2022-11-16 11:57:56,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:56,624 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 429 transitions. [2022-11-16 11:57:56,625 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:56,625 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 429 transitions. [2022-11-16 11:57:56,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-16 11:57:56,627 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:56,628 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:56,628 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 11:57:56,628 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:56,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:56,629 INFO L85 PathProgramCache]: Analyzing trace with hash -468214013, now seen corresponding path program 1 times [2022-11-16 11:57:56,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:56,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233833959] [2022-11-16 11:57:56,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:56,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:56,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:57:56,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-16 11:57:56,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:56,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-16 11:57:56,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:56,709 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:57:56,710 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:56,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233833959] [2022-11-16 11:57:56,710 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233833959] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:56,710 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:56,710 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:57:56,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150857189] [2022-11-16 11:57:56,711 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:56,712 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:57:56,712 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:56,713 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:57:56,713 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:57:56,713 INFO L87 Difference]: Start difference. First operand 343 states and 429 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:56,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:56,989 INFO L93 Difference]: Finished difference Result 685 states and 856 transitions. [2022-11-16 11:57:56,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:57:56,990 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 58 [2022-11-16 11:57:56,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:56,993 INFO L225 Difference]: With dead ends: 685 [2022-11-16 11:57:56,993 INFO L226 Difference]: Without dead ends: 349 [2022-11-16 11:57:56,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:57:56,997 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 165 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 216 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 216 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:56,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 155 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 216 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:57:56,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-11-16 11:57:57,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 343. [2022-11-16 11:57:57,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2384615384615385) internal successors, (322), 281 states have internal predecessors, (322), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-11-16 11:57:57,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2022-11-16 11:57:57,042 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 58 [2022-11-16 11:57:57,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:57,042 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2022-11-16 11:57:57,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:57,043 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2022-11-16 11:57:57,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-16 11:57:57,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:57,044 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:57,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 11:57:57,046 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:57,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:57,047 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2022-11-16 11:57:57,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:57,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212062785] [2022-11-16 11:57:57,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:57,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:57,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:57:57,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:57:57,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:57,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-16 11:57:57,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,209 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:57:57,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:57,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212062785] [2022-11-16 11:57:57,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212062785] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:57,210 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:57,210 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:57:57,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432047154] [2022-11-16 11:57:57,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:57,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:57:57,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:57,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:57:57,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:57:57,212 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:57,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:57,496 INFO L93 Difference]: Finished difference Result 697 states and 878 transitions. [2022-11-16 11:57:57,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:57:57,497 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-11-16 11:57:57,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:57,499 INFO L225 Difference]: With dead ends: 697 [2022-11-16 11:57:57,500 INFO L226 Difference]: Without dead ends: 361 [2022-11-16 11:57:57,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-16 11:57:57,501 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 140 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:57,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 137 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:57:57,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2022-11-16 11:57:57,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 347. [2022-11-16 11:57:57,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 264 states have (on average 1.2348484848484849) internal successors, (326), 285 states have internal predecessors, (326), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-11-16 11:57:57,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 427 transitions. [2022-11-16 11:57:57,558 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 427 transitions. Word has length 55 [2022-11-16 11:57:57,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:57,560 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 427 transitions. [2022-11-16 11:57:57,560 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:57:57,561 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 427 transitions. [2022-11-16 11:57:57,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-16 11:57:57,562 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:57,562 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:57,562 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 11:57:57,563 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:57,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:57,563 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2022-11-16 11:57:57,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:57,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504383520] [2022-11-16 11:57:57,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:57,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:57,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:57:57,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:57:57,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:57,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-16 11:57:57,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:57,692 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:57:57,692 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:57,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504383520] [2022-11-16 11:57:57,693 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504383520] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:57,693 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:57:57,693 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:57:57,693 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [157204075] [2022-11-16 11:57:57,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:57,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:57:57,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:57,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:57:57,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:57:57,695 INFO L87 Difference]: Start difference. First operand 347 states and 427 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 11:57:58,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:58,127 INFO L93 Difference]: Finished difference Result 1063 states and 1356 transitions. [2022-11-16 11:57:58,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 11:57:58,128 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-11-16 11:57:58,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:58,131 INFO L225 Difference]: With dead ends: 1063 [2022-11-16 11:57:58,132 INFO L226 Difference]: Without dead ends: 723 [2022-11-16 11:57:58,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:57:58,134 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 336 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 343 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 454 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 343 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:58,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 184 Invalid, 454 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 343 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:57:58,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 723 states. [2022-11-16 11:57:58,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 723 to 721. [2022-11-16 11:57:58,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 721 states, 546 states have (on average 1.2106227106227105) internal successors, (661), 583 states have internal predecessors, (661), 90 states have call successors, (90), 84 states have call predecessors, (90), 84 states have return successors, (138), 88 states have call predecessors, (138), 90 states have call successors, (138) [2022-11-16 11:57:58,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 721 states to 721 states and 889 transitions. [2022-11-16 11:57:58,215 INFO L78 Accepts]: Start accepts. Automaton has 721 states and 889 transitions. Word has length 55 [2022-11-16 11:57:58,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:58,215 INFO L495 AbstractCegarLoop]: Abstraction has 721 states and 889 transitions. [2022-11-16 11:57:58,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 11:57:58,216 INFO L276 IsEmpty]: Start isEmpty. Operand 721 states and 889 transitions. [2022-11-16 11:57:58,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-16 11:57:58,217 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:58,217 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:58,218 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-16 11:57:58,218 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:58,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:58,219 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2022-11-16 11:57:58,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:58,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625382776] [2022-11-16 11:57:58,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:58,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:58,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:57:58,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-16 11:57:58,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-16 11:57:58,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:58,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-16 11:57:58,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,437 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 11:57:58,438 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:58,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625382776] [2022-11-16 11:57:58,438 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625382776] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:57:58,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1796777631] [2022-11-16 11:57:58,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:58,439 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:57:58,439 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:57:58,443 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:57:58,499 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 11:57:58,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:58,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-16 11:57:58,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:57:58,828 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:57:58,828 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:57:58,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1796777631] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:58,828 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:57:58,829 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-11-16 11:57:58,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891739880] [2022-11-16 11:57:58,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:58,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:57:58,830 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:58,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:57:58,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-11-16 11:57:58,831 INFO L87 Difference]: Start difference. First operand 721 states and 889 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:57:59,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:57:59,066 INFO L93 Difference]: Finished difference Result 1414 states and 1750 transitions. [2022-11-16 11:57:59,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:57:59,067 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2022-11-16 11:57:59,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:57:59,072 INFO L225 Difference]: With dead ends: 1414 [2022-11-16 11:57:59,072 INFO L226 Difference]: Without dead ends: 700 [2022-11-16 11:57:59,074 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-16 11:57:59,075 INFO L413 NwaCegarLoop]: 189 mSDtfsCounter, 77 mSDsluCounter, 635 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 824 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:57:59,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 824 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:57:59,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2022-11-16 11:57:59,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 698. [2022-11-16 11:57:59,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 528 states have (on average 1.1950757575757576) internal successors, (631), 564 states have internal predecessors, (631), 88 states have call successors, (88), 82 states have call predecessors, (88), 81 states have return successors, (121), 85 states have call predecessors, (121), 88 states have call successors, (121) [2022-11-16 11:57:59,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 840 transitions. [2022-11-16 11:57:59,156 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 840 transitions. Word has length 59 [2022-11-16 11:57:59,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:57:59,156 INFO L495 AbstractCegarLoop]: Abstraction has 698 states and 840 transitions. [2022-11-16 11:57:59,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:57:59,157 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 840 transitions. [2022-11-16 11:57:59,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-16 11:57:59,160 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:57:59,160 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:57:59,175 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 11:57:59,367 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-16 11:57:59,367 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:57:59,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:57:59,368 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2022-11-16 11:57:59,368 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:57:59,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896728653] [2022-11-16 11:57:59,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:59,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:57:59,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:57:59,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:57:59,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:57:59,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:57:59,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-16 11:57:59,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-16 11:57:59,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-16 11:57:59,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:57:59,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:57:59,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,692 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-16 11:57:59,693 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:57:59,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896728653] [2022-11-16 11:57:59,693 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896728653] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:57:59,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1127267042] [2022-11-16 11:57:59,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:57:59,693 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:57:59,694 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:57:59,695 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:57:59,720 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 11:57:59,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:57:59,825 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-16 11:57:59,831 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:57:59,944 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:57:59,944 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:57:59,944 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1127267042] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:57:59,944 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:57:59,945 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-11-16 11:57:59,945 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765692949] [2022-11-16 11:57:59,945 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:57:59,946 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:57:59,946 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:57:59,946 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:57:59,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-16 11:57:59,947 INFO L87 Difference]: Start difference. First operand 698 states and 840 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 11:58:00,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:58:00,192 INFO L93 Difference]: Finished difference Result 1799 states and 2265 transitions. [2022-11-16 11:58:00,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:58:00,193 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2022-11-16 11:58:00,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:58:00,199 INFO L225 Difference]: With dead ends: 1799 [2022-11-16 11:58:00,200 INFO L226 Difference]: Without dead ends: 1264 [2022-11-16 11:58:00,202 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 3 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=158, Unknown=0, NotChecked=0, Total=210 [2022-11-16 11:58:00,203 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 180 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 773 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:58:00,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 773 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:58:00,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1264 states. [2022-11-16 11:58:00,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1264 to 1050. [2022-11-16 11:58:00,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1050 states, 792 states have (on average 1.1944444444444444) internal successors, (946), 846 states have internal predecessors, (946), 134 states have call successors, (134), 116 states have call predecessors, (134), 123 states have return successors, (207), 129 states have call predecessors, (207), 134 states have call successors, (207) [2022-11-16 11:58:00,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1050 states to 1050 states and 1287 transitions. [2022-11-16 11:58:00,297 INFO L78 Accepts]: Start accepts. Automaton has 1050 states and 1287 transitions. Word has length 98 [2022-11-16 11:58:00,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:58:00,298 INFO L495 AbstractCegarLoop]: Abstraction has 1050 states and 1287 transitions. [2022-11-16 11:58:00,298 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 11:58:00,298 INFO L276 IsEmpty]: Start isEmpty. Operand 1050 states and 1287 transitions. [2022-11-16 11:58:00,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-16 11:58:00,300 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:58:00,300 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:58:00,311 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 11:58:00,506 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-16 11:58:00,507 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:58:00,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:58:00,509 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2022-11-16 11:58:00,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:58:00,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [111952571] [2022-11-16 11:58:00,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:58:00,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:58:00,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:58:00,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:58:00,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:58:00,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:58:00,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-16 11:58:00,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-16 11:58:00,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-16 11:58:00,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:58:00,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:58:00,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,713 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 11:58:00,713 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:58:00,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [111952571] [2022-11-16 11:58:00,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [111952571] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:58:00,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [876876106] [2022-11-16 11:58:00,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:58:00,714 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:58:00,714 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:58:00,719 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:58:00,739 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 11:58:00,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:58:00,838 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-16 11:58:00,841 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:58:00,891 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 11:58:00,891 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:58:00,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [876876106] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:58:00,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:58:00,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 14 [2022-11-16 11:58:00,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1494038042] [2022-11-16 11:58:00,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:58:00,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:58:00,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:58:00,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:58:00,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2022-11-16 11:58:00,894 INFO L87 Difference]: Start difference. First operand 1050 states and 1287 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:58:00,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:58:00,979 INFO L93 Difference]: Finished difference Result 1489 states and 1814 transitions. [2022-11-16 11:58:00,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 11:58:00,979 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-11-16 11:58:00,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:58:00,980 INFO L225 Difference]: With dead ends: 1489 [2022-11-16 11:58:00,980 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 11:58:00,985 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2022-11-16 11:58:00,985 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:58:00,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:58:00,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 11:58:00,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 11:58:00,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 11:58:00,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 11:58:00,987 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2022-11-16 11:58:00,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:58:00,987 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 11:58:00,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:58:00,988 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 11:58:00,988 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 11:58:00,991 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 11:58:00,999 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 11:58:01,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-16 11:58:01,199 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 11:58:06,435 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-16 11:58:06,436 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2022-11-16 11:58:06,436 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2022-11-16 11:58:06,436 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2022-11-16 11:58:06,436 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2022-11-16 11:58:06,436 INFO L899 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2022-11-16 11:58:06,436 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-16 11:58:06,436 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2022-11-16 11:58:06,436 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2022-11-16 11:58:06,437 INFO L895 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (<= 1 ~waterLevel~0))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse12)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse11 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse12 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse7 .cse2 .cse8) (or .cse5 .cse9 .cse10 .cse6) (or .cse5 .cse9 .cse0 .cse10 .cse2) (or .cse5 .cse11 .cse10 .cse2 (not .cse3)) (or .cse9 .cse6 .cse1 .cse3 .cse4)))) [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2022-11-16 11:58:06,437 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2022-11-16 11:58:06,438 INFO L899 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2022-11-16 11:58:06,438 INFO L895 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4 .cse5) (or .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse1 .cse6))) [2022-11-16 11:58:06,438 INFO L895 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (<= 2 ~waterLevel~0)) .cse4) (or .cse5 .cse6 .cse4) (or (and .cse2 .cse3 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse6 .cse4) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse5))) [2022-11-16 11:58:06,438 INFO L899 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2022-11-16 11:58:06,438 INFO L899 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2022-11-16 11:58:06,438 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2022-11-16 11:58:06,439 INFO L895 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse17 (= 0 ~systemActive~0))) (let ((.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse8 (not .cse17)) (.cse19 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse20 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse11 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|)) (.cse14 (<= 1 ~waterLevel~0)) (.cse15 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0)) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse20 .cse7)) (.cse2 (not .cse20)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse19)) (.cse18 (and .cse6 .cse19 .cse7 .cse8)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse0 .cse1 .cse5 (and .cse6 .cse3 .cse4)) (or .cse0 (and .cse6 .cse3 .cse7) .cse5 .cse8 .cse9) (or .cse10 .cse2 (and .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse9) (or (and .cse6 .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse5 .cse17 .cse18 .cse9) (or .cse0 .cse10 .cse2 .cse9) (or .cse0 .cse5 .cse17 .cse18 .cse9))))) [2022-11-16 11:58:06,439 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-11-16 11:58:06,439 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse6 .cse1) (or .cse5 .cse6 .cse4))) [2022-11-16 11:58:06,439 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-11-16 11:58:06,440 INFO L895 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2022-11-16 11:58:06,440 INFO L895 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-11-16 11:58:06,440 INFO L895 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (and .cse10 (= ~waterLevel~0 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 (<= 2 ~waterLevel~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not .cse5))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse3) (or .cse0 .cse8 .cse2 .cse9) (or .cse4 .cse7 .cse5 .cse6) (or .cse0 .cse8 .cse7 .cse9)))) [2022-11-16 11:58:06,440 INFO L895 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse3)) (.cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse13 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse9 .cse6 .cse10) (or .cse5 .cse9 .cse2 .cse10) (or .cse5 .cse11 .cse7 .cse6) (or .cse5 .cse11 .cse0 .cse7 .cse2) (or .cse5 .cse7 .cse2 .cse8) (or .cse11 .cse6 .cse1 .cse3 .cse4)))) [2022-11-16 11:58:06,440 INFO L899 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2022-11-16 11:58:06,441 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse3) (or .cse4 .cse5 .cse6 .cse3) (or .cse4 .cse7 .cse6 .cse8) (or .cse4 .cse9 .cse10 .cse6) (or .cse0 .cse6 .cse2 .cse3) (or .cse4 .cse7 .cse1 .cse8) (or .cse4 .cse9 .cse10 .cse1)))) [2022-11-16 11:58:06,441 INFO L899 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2022-11-16 11:58:06,441 INFO L899 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2022-11-16 11:58:06,441 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2022-11-16 11:58:06,441 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-11-16 11:58:06,441 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6) (or .cse6 .cse3 .cse4 .cse5))) [2022-11-16 11:58:06,441 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-16 11:58:06,442 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-16 11:58:06,442 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-16 11:58:06,442 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-16 11:58:06,442 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-16 11:58:06,442 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-16 11:58:06,442 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-16 11:58:06,442 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-16 11:58:06,442 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-16 11:58:06,442 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-16 11:58:06,443 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-11-16 11:58:06,443 INFO L895 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-11-16 11:58:06,443 INFO L899 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2022-11-16 11:58:06,443 INFO L899 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2022-11-16 11:58:06,443 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse1 .cse2 .cse4 (<= 1 ~waterLevel~0) .cse5) (and .cse7 .cse6 .cse1 .cse2 .cse4 (= ~waterLevel~0 1) .cse5))) [2022-11-16 11:58:06,443 INFO L899 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L895 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5))) [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L895 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-16 11:58:06,444 INFO L895 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-16 11:58:06,445 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 11:58:06,445 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-16 11:58:06,445 INFO L902 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2022-11-16 11:58:06,445 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2022-11-16 11:58:06,445 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2022-11-16 11:58:06,445 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-16 11:58:06,445 INFO L895 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-11-16 11:58:06,446 INFO L895 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-16 11:58:06,446 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-16 11:58:06,446 INFO L895 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2022-11-16 11:58:06,446 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-16 11:58:06,446 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2022-11-16 11:58:06,446 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse1 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse7 .cse2 .cse3 .cse5 .cse4))) [2022-11-16 11:58:06,446 INFO L899 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2022-11-16 11:58:06,448 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2022-11-16 11:58:06,449 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-16 11:58:06,449 INFO L895 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-16 11:58:06,449 INFO L895 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-16 11:58:06,450 INFO L895 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4)))) [2022-11-16 11:58:06,450 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2022-11-16 11:58:06,450 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2022-11-16 11:58:06,450 INFO L895 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse0 .cse1 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-16 11:58:06,450 INFO L895 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse5)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse2 .cse3) (or .cse0 .cse1 (not .cse5) .cse4 .cse3)))) [2022-11-16 11:58:06,451 INFO L895 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))))) [2022-11-16 11:58:06,451 INFO L895 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-11-16 11:58:06,451 INFO L899 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2022-11-16 11:58:06,451 INFO L899 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-11-16 11:58:06,451 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2022-11-16 11:58:06,452 INFO L899 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2022-11-16 11:58:06,452 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-16 11:58:06,452 INFO L899 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2022-11-16 11:58:06,452 INFO L899 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2022-11-16 11:58:06,452 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2022-11-16 11:58:06,452 INFO L899 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2022-11-16 11:58:06,453 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2022-11-16 11:58:06,453 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2022-11-16 11:58:06,456 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:58:06,458 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 11:58:06,488 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 11:58:06 BoogieIcfgContainer [2022-11-16 11:58:06,488 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 11:58:06,489 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 11:58:06,489 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 11:58:06,489 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 11:58:06,490 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:57:53" (3/4) ... [2022-11-16 11:58:06,492 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 11:58:06,499 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 11:58:06,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 11:58:06,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 11:58:06,506 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-11-16 11:58:06,507 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-16 11:58:06,507 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-16 11:58:06,508 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 11:58:06,508 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 11:58:06,509 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:58:06,509 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:58:06,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-16 11:58:06,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-16 11:58:06,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) [2022-11-16 11:58:06,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-16 11:58:06,535 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 11:58:06,535 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) [2022-11-16 11:58:06,536 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) [2022-11-16 11:58:06,536 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) [2022-11-16 11:58:06,536 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2022-11-16 11:58:06,537 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-16 11:58:06,537 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 11:58:06,537 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-16 11:58:06,537 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-11-16 11:58:06,538 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-16 11:58:06,538 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 11:58:06,538 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-16 11:58:06,538 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-16 11:58:06,559 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/witness.graphml [2022-11-16 11:58:06,560 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 11:58:06,560 INFO L158 Benchmark]: Toolchain (without parser) took 14130.03ms. Allocated memory was 142.6MB in the beginning and 251.7MB in the end (delta: 109.1MB). Free memory was 110.0MB in the beginning and 146.4MB in the end (delta: -36.4MB). Peak memory consumption was 72.5MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,561 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 92.3MB. Free memory was 48.3MB in the beginning and 48.3MB in the end (delta: 40.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:58:06,561 INFO L158 Benchmark]: CACSL2BoogieTranslator took 517.87ms. Allocated memory is still 142.6MB. Free memory was 110.0MB in the beginning and 110.9MB in the end (delta: -938.9kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,561 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.45ms. Allocated memory is still 142.6MB. Free memory was 110.9MB in the beginning and 108.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,562 INFO L158 Benchmark]: Boogie Preprocessor took 47.82ms. Allocated memory is still 142.6MB. Free memory was 108.0MB in the beginning and 106.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:58:06,562 INFO L158 Benchmark]: RCFGBuilder took 632.48ms. Allocated memory is still 142.6MB. Free memory was 106.4MB in the beginning and 86.6MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,562 INFO L158 Benchmark]: TraceAbstraction took 12790.37ms. Allocated memory was 142.6MB in the beginning and 251.7MB in the end (delta: 109.1MB). Free memory was 86.2MB in the beginning and 152.7MB in the end (delta: -66.5MB). Peak memory consumption was 113.1MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,563 INFO L158 Benchmark]: Witness Printer took 71.30ms. Allocated memory is still 251.7MB. Free memory was 152.7MB in the beginning and 146.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-16 11:58:06,564 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 92.3MB. Free memory was 48.3MB in the beginning and 48.3MB in the end (delta: 40.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 517.87ms. Allocated memory is still 142.6MB. Free memory was 110.0MB in the beginning and 110.9MB in the end (delta: -938.9kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.45ms. Allocated memory is still 142.6MB. Free memory was 110.9MB in the beginning and 108.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.82ms. Allocated memory is still 142.6MB. Free memory was 108.0MB in the beginning and 106.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 632.48ms. Allocated memory is still 142.6MB. Free memory was 106.4MB in the beginning and 86.6MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 12790.37ms. Allocated memory was 142.6MB in the beginning and 251.7MB in the end (delta: 109.1MB). Free memory was 86.2MB in the beginning and 152.7MB in the end (delta: -66.5MB). Peak memory consumption was 113.1MB. Max. memory is 16.1GB. * Witness Printer took 71.30ms. Allocated memory is still 251.7MB. Free memory was 152.7MB in the beginning and 146.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1484 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1458 mSDsluCounter, 3928 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2754 mSDsCounter, 342 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1758 IncrementalHoareTripleChecker+Invalid, 2100 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 342 mSolverCounterUnsat, 1174 mSDtfsCounter, 1758 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 455 GetRequests, 353 SyntacticMatches, 3 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1050occurred in iteration=11, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 270 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2151 PreInvPairs, 2357 NumberOfFragments, 2686 HoareAnnotationTreeSize, 2151 FomulaSimplifications, 336 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 46 FomulaSimplificationsInter, 8306 FormulaSimplificationTreeSizeReductionInter, 4.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 877 NumberOfCodeBlocks, 877 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 862 ConstructedInterpolants, 0 QuantifiedInterpolants, 1446 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 136/142 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-16 11:58:06,599 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fd1c17ce-0b74-4993-a763-810baa6fe194/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE