./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d0f26fc8ab0bdaf05de905c05e583bc491c727ef99c3d3df87bba160b541b55a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 19:56:51,518 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 19:56:51,520 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 19:56:51,541 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 19:56:51,541 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 19:56:51,542 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 19:56:51,544 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 19:56:51,546 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 19:56:51,547 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 19:56:51,548 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 19:56:51,549 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 19:56:51,551 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 19:56:51,551 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 19:56:51,552 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 19:56:51,553 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 19:56:51,555 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 19:56:51,556 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 19:56:51,557 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 19:56:51,559 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 19:56:51,563 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 19:56:51,570 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 19:56:51,571 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 19:56:51,572 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 19:56:51,573 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 19:56:51,577 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 19:56:51,578 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 19:56:51,578 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 19:56:51,579 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 19:56:51,580 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 19:56:51,581 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 19:56:51,581 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 19:56:51,582 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 19:56:51,583 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 19:56:51,594 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 19:56:51,595 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 19:56:51,596 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 19:56:51,596 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 19:56:51,597 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 19:56:51,597 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 19:56:51,598 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 19:56:51,599 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 19:56:51,602 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 19:56:51,644 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 19:56:51,644 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 19:56:51,645 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 19:56:51,645 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 19:56:51,646 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 19:56:51,646 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 19:56:51,646 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 19:56:51,647 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 19:56:51,647 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 19:56:51,647 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 19:56:51,647 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 19:56:51,648 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 19:56:51,649 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 19:56:51,649 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 19:56:51,649 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 19:56:51,649 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 19:56:51,649 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 19:56:51,650 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 19:56:51,650 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 19:56:51,652 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 19:56:51,652 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 19:56:51,654 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 19:56:51,654 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 19:56:51,655 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 19:56:51,655 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 19:56:51,655 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 19:56:51,655 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 19:56:51,656 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 19:56:51,656 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d0f26fc8ab0bdaf05de905c05e583bc491c727ef99c3d3df87bba160b541b55a [2022-11-18 19:56:51,891 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 19:56:51,914 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 19:56:51,916 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 19:56:51,918 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 19:56:51,919 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 19:56:51,920 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c [2022-11-18 19:56:52,009 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/data/37dc46808/f645fa21185749d29a66216b9d5c2361/FLAG22fc59a0a [2022-11-18 19:56:52,642 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 19:56:52,643 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c [2022-11-18 19:56:52,673 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/data/37dc46808/f645fa21185749d29a66216b9d5c2361/FLAG22fc59a0a [2022-11-18 19:56:52,926 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/data/37dc46808/f645fa21185749d29a66216b9d5c2361 [2022-11-18 19:56:52,929 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 19:56:52,931 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 19:56:52,935 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 19:56:52,935 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 19:56:52,942 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 19:56:52,942 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 07:56:52" (1/1) ... [2022-11-18 19:56:52,944 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@799db461 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:52, skipping insertion in model container [2022-11-18 19:56:52,944 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 07:56:52" (1/1) ... [2022-11-18 19:56:52,950 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 19:56:53,008 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 19:56:53,361 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c[18661,18674] [2022-11-18 19:56:53,365 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 19:56:53,378 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 19:56:53,473 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/sv-benchmarks/c/product-lines/minepump_spec1_product57.cil.c[18661,18674] [2022-11-18 19:56:53,474 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 19:56:53,490 INFO L208 MainTranslator]: Completed translation [2022-11-18 19:56:53,490 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53 WrapperNode [2022-11-18 19:56:53,491 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 19:56:53,492 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 19:56:53,492 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 19:56:53,492 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 19:56:53,499 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,512 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,535 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 212 [2022-11-18 19:56:53,536 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 19:56:53,537 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 19:56:53,537 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 19:56:53,537 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 19:56:53,546 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,546 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,548 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,549 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,554 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,559 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,560 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,561 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,569 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 19:56:53,569 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 19:56:53,570 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 19:56:53,570 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 19:56:53,571 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (1/1) ... [2022-11-18 19:56:53,577 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 19:56:53,589 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:56:53,604 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 19:56:53,607 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 19:56:53,657 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 19:56:53,658 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 19:56:53,658 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 19:56:53,658 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 19:56:53,658 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 19:56:53,658 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 19:56:53,658 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 19:56:53,660 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 19:56:53,661 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 19:56:53,661 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:56:53,661 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:56:53,661 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 19:56:53,662 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 19:56:53,662 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 19:56:53,662 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 19:56:53,662 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 19:56:53,662 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 19:56:53,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 19:56:53,791 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 19:56:53,808 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 19:56:54,170 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 19:56:54,184 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 19:56:54,185 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 19:56:54,187 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:56:54 BoogieIcfgContainer [2022-11-18 19:56:54,187 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 19:56:54,189 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 19:56:54,189 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 19:56:54,195 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 19:56:54,195 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 07:56:52" (1/3) ... [2022-11-18 19:56:54,197 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2bd596b1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 07:56:54, skipping insertion in model container [2022-11-18 19:56:54,197 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:56:53" (2/3) ... [2022-11-18 19:56:54,198 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2bd596b1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 07:56:54, skipping insertion in model container [2022-11-18 19:56:54,198 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:56:54" (3/3) ... [2022-11-18 19:56:54,199 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product57.cil.c [2022-11-18 19:56:54,214 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 19:56:54,214 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 19:56:54,276 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 19:56:54,283 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1d25bf29, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 19:56:54,283 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 19:56:54,286 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 78 states have internal predecessors, (97), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-18 19:56:54,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-18 19:56:54,304 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:54,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:54,305 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:54,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:54,312 INFO L85 PathProgramCache]: Analyzing trace with hash -1849570436, now seen corresponding path program 1 times [2022-11-18 19:56:54,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:54,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1144578469] [2022-11-18 19:56:54,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:54,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:54,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:54,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 19:56:54,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:54,507 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:54,507 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:54,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1144578469] [2022-11-18 19:56:54,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1144578469] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:54,508 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:54,509 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 19:56:54,515 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133041907] [2022-11-18 19:56:54,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:54,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 19:56:54,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:54,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 19:56:54,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 19:56:54,561 INFO L87 Difference]: Start difference. First operand has 91 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 78 states have internal predecessors, (97), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:54,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:54,609 INFO L93 Difference]: Finished difference Result 174 states and 237 transitions. [2022-11-18 19:56:54,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 19:56:54,613 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-18 19:56:54,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:54,625 INFO L225 Difference]: With dead ends: 174 [2022-11-18 19:56:54,625 INFO L226 Difference]: Without dead ends: 82 [2022-11-18 19:56:54,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 19:56:54,635 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:54,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:56:54,656 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-18 19:56:54,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-11-18 19:56:54,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 70 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 19:56:54,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-11-18 19:56:54,711 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 23 [2022-11-18 19:56:54,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:54,712 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-11-18 19:56:54,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:54,714 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-11-18 19:56:54,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-18 19:56:54,717 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:54,717 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:54,718 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 19:56:54,718 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:54,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:54,721 INFO L85 PathProgramCache]: Analyzing trace with hash -1054157966, now seen corresponding path program 1 times [2022-11-18 19:56:54,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:54,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012424179] [2022-11-18 19:56:54,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:54,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:54,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:54,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 19:56:54,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:54,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:54,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:54,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012424179] [2022-11-18 19:56:54,920 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012424179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:54,921 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:54,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 19:56:54,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476147896] [2022-11-18 19:56:54,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:54,923 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 19:56:54,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:54,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 19:56:54,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:54,924 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:54,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:54,957 INFO L93 Difference]: Finished difference Result 130 states and 168 transitions. [2022-11-18 19:56:54,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 19:56:54,961 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-18 19:56:54,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:54,967 INFO L225 Difference]: With dead ends: 130 [2022-11-18 19:56:54,967 INFO L226 Difference]: Without dead ends: 73 [2022-11-18 19:56:54,969 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:54,970 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 12 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:54,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 170 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:56:54,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-18 19:56:54,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-18 19:56:54,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 64 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 19:56:54,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 94 transitions. [2022-11-18 19:56:54,989 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 94 transitions. Word has length 24 [2022-11-18 19:56:54,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:54,990 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 94 transitions. [2022-11-18 19:56:54,991 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:54,991 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 94 transitions. [2022-11-18 19:56:54,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-18 19:56:54,994 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:54,994 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:54,995 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 19:56:54,995 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:54,995 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:54,995 INFO L85 PathProgramCache]: Analyzing trace with hash 1057029214, now seen corresponding path program 1 times [2022-11-18 19:56:54,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:54,996 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1020810680] [2022-11-18 19:56:54,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:54,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:55,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:55,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:55,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:55,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1020810680] [2022-11-18 19:56:55,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1020810680] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:55,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:55,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 19:56:55,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565039061] [2022-11-18 19:56:55,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:55,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 19:56:55,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:55,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 19:56:55,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:55,081 INFO L87 Difference]: Start difference. First operand 73 states and 94 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:55,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:55,097 INFO L93 Difference]: Finished difference Result 139 states and 182 transitions. [2022-11-18 19:56:55,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 19:56:55,098 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-18 19:56:55,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:55,099 INFO L225 Difference]: With dead ends: 139 [2022-11-18 19:56:55,099 INFO L226 Difference]: Without dead ends: 73 [2022-11-18 19:56:55,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:55,101 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 76 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:55,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 92 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:56:55,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-18 19:56:55,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-18 19:56:55,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 64 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 19:56:55,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2022-11-18 19:56:55,112 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 28 [2022-11-18 19:56:55,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:55,113 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2022-11-18 19:56:55,113 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:55,113 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2022-11-18 19:56:55,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-18 19:56:55,114 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:55,114 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:55,114 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 19:56:55,115 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:55,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:55,115 INFO L85 PathProgramCache]: Analyzing trace with hash -1228134254, now seen corresponding path program 1 times [2022-11-18 19:56:55,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:55,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [219925138] [2022-11-18 19:56:55,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:55,116 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:55,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 19:56:55,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,263 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:55,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:55,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [219925138] [2022-11-18 19:56:55,264 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [219925138] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:55,264 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:55,264 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 19:56:55,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2080180875] [2022-11-18 19:56:55,265 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:55,265 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 19:56:55,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:55,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 19:56:55,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:55,266 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:55,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:55,319 INFO L93 Difference]: Finished difference Result 182 states and 237 transitions. [2022-11-18 19:56:55,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 19:56:55,320 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 36 [2022-11-18 19:56:55,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:55,321 INFO L225 Difference]: With dead ends: 182 [2022-11-18 19:56:55,321 INFO L226 Difference]: Without dead ends: 116 [2022-11-18 19:56:55,322 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:56:55,323 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 73 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:55,324 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 164 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:56:55,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2022-11-18 19:56:55,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 114. [2022-11-18 19:56:55,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 88 states have (on average 1.2954545454545454) internal successors, (114), 96 states have internal predecessors, (114), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-18 19:56:55,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 144 transitions. [2022-11-18 19:56:55,341 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 144 transitions. Word has length 36 [2022-11-18 19:56:55,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:55,341 INFO L495 AbstractCegarLoop]: Abstraction has 114 states and 144 transitions. [2022-11-18 19:56:55,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:56:55,342 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 144 transitions. [2022-11-18 19:56:55,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 19:56:55,343 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:55,343 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:55,343 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 19:56:55,343 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:55,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:55,344 INFO L85 PathProgramCache]: Analyzing trace with hash -1893109632, now seen corresponding path program 1 times [2022-11-18 19:56:55,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:55,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318009886] [2022-11-18 19:56:55,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:55,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:55,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:55,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:55,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 19:56:55,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:55,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:55,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:55,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318009886] [2022-11-18 19:56:55,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318009886] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:55,583 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:55,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:56:55,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929560082] [2022-11-18 19:56:55,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:55,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:56:55,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:55,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:56:55,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:56:55,585 INFO L87 Difference]: Start difference. First operand 114 states and 144 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:55,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:55,943 INFO L93 Difference]: Finished difference Result 382 states and 509 transitions. [2022-11-18 19:56:55,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-18 19:56:55,944 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-11-18 19:56:55,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:55,946 INFO L225 Difference]: With dead ends: 382 [2022-11-18 19:56:55,946 INFO L226 Difference]: Without dead ends: 275 [2022-11-18 19:56:55,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-11-18 19:56:55,949 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 206 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:55,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 387 Invalid, 227 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:56:55,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-11-18 19:56:55,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 224. [2022-11-18 19:56:55,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 173 states have (on average 1.277456647398844) internal successors, (221), 184 states have internal predecessors, (221), 26 states have call successors, (26), 22 states have call predecessors, (26), 24 states have return successors, (40), 26 states have call predecessors, (40), 26 states have call successors, (40) [2022-11-18 19:56:55,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 287 transitions. [2022-11-18 19:56:55,993 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 287 transitions. Word has length 44 [2022-11-18 19:56:55,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:55,994 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 287 transitions. [2022-11-18 19:56:55,994 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:55,994 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 287 transitions. [2022-11-18 19:56:55,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 19:56:55,996 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:55,996 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:55,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 19:56:55,996 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:55,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:55,997 INFO L85 PathProgramCache]: Analyzing trace with hash -2111964350, now seen corresponding path program 1 times [2022-11-18 19:56:55,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:55,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891694554] [2022-11-18 19:56:55,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:55,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:56,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:56,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:56,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 19:56:56,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:56,180 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:56,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891694554] [2022-11-18 19:56:56,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891694554] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:56,181 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:56,181 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:56:56,181 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895332966] [2022-11-18 19:56:56,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:56,182 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:56:56,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:56,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:56:56,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:56:56,183 INFO L87 Difference]: Start difference. First operand 224 states and 287 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 19:56:56,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:56,435 INFO L93 Difference]: Finished difference Result 246 states and 315 transitions. [2022-11-18 19:56:56,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-18 19:56:56,436 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2022-11-18 19:56:56,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:56,442 INFO L225 Difference]: With dead ends: 246 [2022-11-18 19:56:56,442 INFO L226 Difference]: Without dead ends: 244 [2022-11-18 19:56:56,443 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-18 19:56:56,449 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 138 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:56,453 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 358 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:56:56,456 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 244 states. [2022-11-18 19:56:56,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 244 to 224. [2022-11-18 19:56:56,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 173 states have (on average 1.260115606936416) internal successors, (218), 184 states have internal predecessors, (218), 26 states have call successors, (26), 22 states have call predecessors, (26), 24 states have return successors, (40), 26 states have call predecessors, (40), 26 states have call successors, (40) [2022-11-18 19:56:56,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 284 transitions. [2022-11-18 19:56:56,509 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 284 transitions. Word has length 44 [2022-11-18 19:56:56,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:56,510 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 284 transitions. [2022-11-18 19:56:56,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 19:56:56,510 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 284 transitions. [2022-11-18 19:56:56,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 19:56:56,512 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:56,512 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:56,512 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 19:56:56,512 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:56,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:56,513 INFO L85 PathProgramCache]: Analyzing trace with hash 1790289181, now seen corresponding path program 1 times [2022-11-18 19:56:56,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:56,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1609215087] [2022-11-18 19:56:56,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:56,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:56,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:56,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:56,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-18 19:56:56,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:56,680 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 19:56:56,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:56,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1609215087] [2022-11-18 19:56:56,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1609215087] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:56,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:56,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:56:56,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660257127] [2022-11-18 19:56:56,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:56,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:56:56,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:56,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:56:56,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:56:56,685 INFO L87 Difference]: Start difference. First operand 224 states and 284 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:56,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:56,910 INFO L93 Difference]: Finished difference Result 459 states and 600 transitions. [2022-11-18 19:56:56,910 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:56:56,911 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-18 19:56:56,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:56,913 INFO L225 Difference]: With dead ends: 459 [2022-11-18 19:56:56,913 INFO L226 Difference]: Without dead ends: 242 [2022-11-18 19:56:56,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 19:56:56,918 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 64 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:56,918 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 341 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:56:56,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 242 states. [2022-11-18 19:56:56,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 242 to 230. [2022-11-18 19:56:56,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 179 states have (on average 1.2513966480446927) internal successors, (224), 190 states have internal predecessors, (224), 26 states have call successors, (26), 22 states have call predecessors, (26), 24 states have return successors, (40), 26 states have call predecessors, (40), 26 states have call successors, (40) [2022-11-18 19:56:56,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 290 transitions. [2022-11-18 19:56:56,953 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 290 transitions. Word has length 50 [2022-11-18 19:56:56,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:56,956 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 290 transitions. [2022-11-18 19:56:56,960 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:56,960 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 290 transitions. [2022-11-18 19:56:56,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 19:56:56,962 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:56,962 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:56,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 19:56:56,964 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:56,965 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:56,965 INFO L85 PathProgramCache]: Analyzing trace with hash 1852328795, now seen corresponding path program 1 times [2022-11-18 19:56:56,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:56,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348563973] [2022-11-18 19:56:56,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:56,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:56,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:57,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:57,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-18 19:56:57,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,140 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 19:56:57,140 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:57,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348563973] [2022-11-18 19:56:57,141 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348563973] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:57,141 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:57,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:56:57,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [7505856] [2022-11-18 19:56:57,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:57,142 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:56:57,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:57,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:56:57,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:56:57,143 INFO L87 Difference]: Start difference. First operand 230 states and 290 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:57,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:57,341 INFO L93 Difference]: Finished difference Result 415 states and 530 transitions. [2022-11-18 19:56:57,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 19:56:57,341 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-18 19:56:57,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:57,343 INFO L225 Difference]: With dead ends: 415 [2022-11-18 19:56:57,343 INFO L226 Difference]: Without dead ends: 192 [2022-11-18 19:56:57,344 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-18 19:56:57,344 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 148 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:57,345 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 237 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:56:57,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-18 19:56:57,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 187. [2022-11-18 19:56:57,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 145 states have (on average 1.2275862068965517) internal successors, (178), 154 states have internal predecessors, (178), 21 states have call successors, (21), 18 states have call predecessors, (21), 20 states have return successors, (28), 21 states have call predecessors, (28), 21 states have call successors, (28) [2022-11-18 19:56:57,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 227 transitions. [2022-11-18 19:56:57,366 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 227 transitions. Word has length 50 [2022-11-18 19:56:57,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:57,366 INFO L495 AbstractCegarLoop]: Abstraction has 187 states and 227 transitions. [2022-11-18 19:56:57,367 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:56:57,367 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 227 transitions. [2022-11-18 19:56:57,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-18 19:56:57,367 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:57,368 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:57,368 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 19:56:57,368 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:57,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:57,368 INFO L85 PathProgramCache]: Analyzing trace with hash 417001919, now seen corresponding path program 1 times [2022-11-18 19:56:57,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:57,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189840468] [2022-11-18 19:56:57,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:57,369 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:57,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:56:57,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 19:56:57,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:57,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 19:56:57,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:57,518 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 19:56:57,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:57,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189840468] [2022-11-18 19:56:57,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189840468] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:57,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:56:57,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 19:56:57,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205916115] [2022-11-18 19:56:57,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:57,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 19:56:57,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:57,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 19:56:57,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-18 19:56:57,521 INFO L87 Difference]: Start difference. First operand 187 states and 227 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 19:56:58,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:58,192 INFO L93 Difference]: Finished difference Result 670 states and 835 transitions. [2022-11-18 19:56:58,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-18 19:56:58,193 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-18 19:56:58,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:58,196 INFO L225 Difference]: With dead ends: 670 [2022-11-18 19:56:58,196 INFO L226 Difference]: Without dead ends: 490 [2022-11-18 19:56:58,197 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2022-11-18 19:56:58,197 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 316 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 391 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 322 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 391 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:58,198 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [322 Valid, 364 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 391 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 19:56:58,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 490 states. [2022-11-18 19:56:58,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 490 to 379. [2022-11-18 19:56:58,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 379 states, 290 states have (on average 1.2137931034482758) internal successors, (352), 313 states have internal predecessors, (352), 46 states have call successors, (46), 36 states have call predecessors, (46), 42 states have return successors, (71), 44 states have call predecessors, (71), 46 states have call successors, (71) [2022-11-18 19:56:58,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 379 states to 379 states and 469 transitions. [2022-11-18 19:56:58,243 INFO L78 Accepts]: Start accepts. Automaton has 379 states and 469 transitions. Word has length 54 [2022-11-18 19:56:58,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:58,244 INFO L495 AbstractCegarLoop]: Abstraction has 379 states and 469 transitions. [2022-11-18 19:56:58,244 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 19:56:58,244 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 469 transitions. [2022-11-18 19:56:58,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-18 19:56:58,245 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:58,245 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:58,245 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 19:56:58,246 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:58,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:58,246 INFO L85 PathProgramCache]: Analyzing trace with hash -666503357, now seen corresponding path program 1 times [2022-11-18 19:56:58,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:58,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485229615] [2022-11-18 19:56:58,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:58,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:58,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:56:58,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 19:56:58,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 19:56:58,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:58,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-18 19:56:58,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,435 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 19:56:58,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:58,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485229615] [2022-11-18 19:56:58,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485229615] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 19:56:58,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585627327] [2022-11-18 19:56:58,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:58,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:56:58,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:56:58,439 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 19:56:58,458 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 19:56:58,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:58,533 INFO L263 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-18 19:56:58,541 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 19:56:58,816 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:56:58,817 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 19:56:58,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585627327] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:58,817 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 19:56:58,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 19 [2022-11-18 19:56:58,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [294092605] [2022-11-18 19:56:58,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:58,819 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 19:56:58,819 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:58,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 19:56:58,820 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=296, Unknown=0, NotChecked=0, Total=342 [2022-11-18 19:56:58,820 INFO L87 Difference]: Start difference. First operand 379 states and 469 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-18 19:56:58,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:58,989 INFO L93 Difference]: Finished difference Result 739 states and 922 transitions. [2022-11-18 19:56:58,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:56:58,990 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-11-18 19:56:58,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:58,992 INFO L225 Difference]: With dead ends: 739 [2022-11-18 19:56:58,993 INFO L226 Difference]: Without dead ends: 367 [2022-11-18 19:56:58,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2022-11-18 19:56:58,994 INFO L413 NwaCegarLoop]: 167 mSDtfsCounter, 66 mSDsluCounter, 643 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 810 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:58,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 810 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:56:58,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-11-18 19:56:59,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 365. [2022-11-18 19:56:59,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 365 states, 279 states have (on average 1.200716845878136) internal successors, (335), 301 states have internal predecessors, (335), 45 states have call successors, (45), 36 states have call predecessors, (45), 40 states have return successors, (61), 42 states have call predecessors, (61), 45 states have call successors, (61) [2022-11-18 19:56:59,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 441 transitions. [2022-11-18 19:56:59,036 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 441 transitions. Word has length 58 [2022-11-18 19:56:59,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:59,036 INFO L495 AbstractCegarLoop]: Abstraction has 365 states and 441 transitions. [2022-11-18 19:56:59,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-18 19:56:59,036 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 441 transitions. [2022-11-18 19:56:59,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-18 19:56:59,038 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:59,038 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:59,049 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 19:56:59,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:56:59,244 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:59,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:59,245 INFO L85 PathProgramCache]: Analyzing trace with hash 250422631, now seen corresponding path program 1 times [2022-11-18 19:56:59,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:59,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1823098151] [2022-11-18 19:56:59,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:59,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:59,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:56:59,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:56:59,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 19:56:59,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:56:59,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 19:56:59,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-18 19:56:59,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-18 19:56:59,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 19:56:59,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-18 19:56:59,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,416 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-18 19:56:59,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:56:59,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1823098151] [2022-11-18 19:56:59,416 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1823098151] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 19:56:59,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [340039554] [2022-11-18 19:56:59,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:59,417 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:56:59,417 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:56:59,419 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 19:56:59,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 19:56:59,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:56:59,528 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-18 19:56:59,535 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 19:56:59,644 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 19:56:59,645 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 19:56:59,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [340039554] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:56:59,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 19:56:59,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-18 19:56:59,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354556880] [2022-11-18 19:56:59,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:56:59,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 19:56:59,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:56:59,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 19:56:59,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 19:56:59,647 INFO L87 Difference]: Start difference. First operand 365 states and 441 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 19:56:59,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:56:59,710 INFO L93 Difference]: Finished difference Result 776 states and 986 transitions. [2022-11-18 19:56:59,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 19:56:59,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 96 [2022-11-18 19:56:59,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:56:59,713 INFO L225 Difference]: With dead ends: 776 [2022-11-18 19:56:59,714 INFO L226 Difference]: Without dead ends: 508 [2022-11-18 19:56:59,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 111 SyntacticMatches, 3 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 19:56:59,715 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 25 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:56:59,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 222 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:56:59,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2022-11-18 19:56:59,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 508. [2022-11-18 19:56:59,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 508 states, 384 states have (on average 1.1953125) internal successors, (459), 410 states have internal predecessors, (459), 65 states have call successors, (65), 54 states have call predecessors, (65), 58 states have return successors, (108), 65 states have call predecessors, (108), 65 states have call successors, (108) [2022-11-18 19:56:59,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 508 states to 508 states and 632 transitions. [2022-11-18 19:56:59,769 INFO L78 Accepts]: Start accepts. Automaton has 508 states and 632 transitions. Word has length 96 [2022-11-18 19:56:59,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:56:59,770 INFO L495 AbstractCegarLoop]: Abstraction has 508 states and 632 transitions. [2022-11-18 19:56:59,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 19:56:59,770 INFO L276 IsEmpty]: Start isEmpty. Operand 508 states and 632 transitions. [2022-11-18 19:56:59,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-18 19:56:59,772 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:56:59,773 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:56:59,788 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 19:56:59,978 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:56:59,979 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:56:59,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:56:59,980 INFO L85 PathProgramCache]: Analyzing trace with hash 759895721, now seen corresponding path program 1 times [2022-11-18 19:56:59,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:56:59,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037517466] [2022-11-18 19:56:59,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:56:59,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:56:59,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:57:00,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:57:00,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 19:57:00,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:57:00,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 19:57:00,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-18 19:57:00,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-18 19:57:00,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 19:57:00,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-18 19:57:00,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,233 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-18 19:57:00,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:57:00,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037517466] [2022-11-18 19:57:00,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037517466] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 19:57:00,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [286978602] [2022-11-18 19:57:00,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:57:00,234 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:57:00,234 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:57:00,235 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 19:57:00,262 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-18 19:57:00,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:00,344 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-18 19:57:00,347 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 19:57:00,464 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 19:57:00,464 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 19:57:00,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [286978602] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:57:00,465 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 19:57:00,465 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-11-18 19:57:00,466 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [413921652] [2022-11-18 19:57:00,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:57:00,467 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:57:00,467 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:57:00,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:57:00,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-18 19:57:00,468 INFO L87 Difference]: Start difference. First operand 508 states and 632 transitions. Second operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 19:57:00,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:57:00,683 INFO L93 Difference]: Finished difference Result 1361 states and 1785 transitions. [2022-11-18 19:57:00,683 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 19:57:00,684 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 96 [2022-11-18 19:57:00,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:57:00,691 INFO L225 Difference]: With dead ends: 1361 [2022-11-18 19:57:00,691 INFO L226 Difference]: Without dead ends: 950 [2022-11-18 19:57:00,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 110 SyntacticMatches, 3 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=158, Unknown=0, NotChecked=0, Total=210 [2022-11-18 19:57:00,694 INFO L413 NwaCegarLoop]: 181 mSDtfsCounter, 165 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:57:00,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 683 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:57:00,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 950 states. [2022-11-18 19:57:00,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 950 to 832. [2022-11-18 19:57:00,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 832 states, 628 states have (on average 1.1863057324840764) internal successors, (745), 670 states have internal predecessors, (745), 108 states have call successors, (108), 78 states have call predecessors, (108), 95 states have return successors, (203), 111 states have call predecessors, (203), 108 states have call successors, (203) [2022-11-18 19:57:00,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 832 states to 832 states and 1056 transitions. [2022-11-18 19:57:00,821 INFO L78 Accepts]: Start accepts. Automaton has 832 states and 1056 transitions. Word has length 96 [2022-11-18 19:57:00,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:57:00,822 INFO L495 AbstractCegarLoop]: Abstraction has 832 states and 1056 transitions. [2022-11-18 19:57:00,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 19:57:00,822 INFO L276 IsEmpty]: Start isEmpty. Operand 832 states and 1056 transitions. [2022-11-18 19:57:00,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-18 19:57:00,826 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:57:00,826 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:57:00,843 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-18 19:57:01,043 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:57:01,043 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:57:01,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:57:01,044 INFO L85 PathProgramCache]: Analyzing trace with hash -1045542613, now seen corresponding path program 1 times [2022-11-18 19:57:01,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:57:01,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [158177626] [2022-11-18 19:57:01,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:57:01,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:57:01,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:57:01,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:57:01,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 19:57:01,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:57:01,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 19:57:01,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-18 19:57:01,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-18 19:57:01,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 19:57:01,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-18 19:57:01,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,170 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 19:57:01,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:57:01,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [158177626] [2022-11-18 19:57:01,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [158177626] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 19:57:01,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1923411755] [2022-11-18 19:57:01,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:57:01,171 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:57:01,171 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:57:01,172 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 19:57:01,198 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-18 19:57:01,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:57:01,272 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-18 19:57:01,276 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 19:57:01,327 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-18 19:57:01,327 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 19:57:01,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1923411755] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:57:01,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 19:57:01,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-11-18 19:57:01,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181613976] [2022-11-18 19:57:01,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:57:01,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 19:57:01,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:57:01,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 19:57:01,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-11-18 19:57:01,329 INFO L87 Difference]: Start difference. First operand 832 states and 1056 transitions. Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 19:57:01,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:57:01,406 INFO L93 Difference]: Finished difference Result 1153 states and 1449 transitions. [2022-11-18 19:57:01,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 19:57:01,407 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 96 [2022-11-18 19:57:01,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:57:01,407 INFO L225 Difference]: With dead ends: 1153 [2022-11-18 19:57:01,407 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 19:57:01,410 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-11-18 19:57:01,411 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 36 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 331 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:57:01,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 331 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:57:01,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 19:57:01,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 19:57:01,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 19:57:01,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 19:57:01,413 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2022-11-18 19:57:01,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:57:01,413 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 19:57:01,413 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 19:57:01,413 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 19:57:01,413 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 19:57:01,416 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 19:57:01,426 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-18 19:57:01,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-18 19:57:01,623 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 19:57:06,058 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 586 592) no Hoare annotation was computed. [2022-11-18 19:57:06,059 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 586 592) the Hoare annotation is: true [2022-11-18 19:57:06,059 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 897 908) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse3 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= 0 |old(~methaneLevelCritical~0)|)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3 .cse4))) [2022-11-18 19:57:06,059 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 897 908) no Hoare annotation was computed. [2022-11-18 19:57:06,059 INFO L899 garLoopResultBuilder]: For program point L901-1(lines 897 908) no Hoare annotation was computed. [2022-11-18 19:57:06,059 INFO L902 garLoopResultBuilder]: At program point L800(lines 775 804) the Hoare annotation is: true [2022-11-18 19:57:06,060 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 775 804) no Hoare annotation was computed. [2022-11-18 19:57:06,060 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 775 804) the Hoare annotation is: true [2022-11-18 19:57:06,060 INFO L899 garLoopResultBuilder]: For program point L796(line 796) no Hoare annotation was computed. [2022-11-18 19:57:06,060 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 793) no Hoare annotation was computed. [2022-11-18 19:57:06,060 INFO L902 garLoopResultBuilder]: At program point L789-1(lines 789 793) the Hoare annotation is: true [2022-11-18 19:57:06,060 INFO L899 garLoopResultBuilder]: For program point L786(line 786) no Hoare annotation was computed. [2022-11-18 19:57:06,060 INFO L902 garLoopResultBuilder]: At program point L785-2(lines 785 799) the Hoare annotation is: true [2022-11-18 19:57:06,060 INFO L902 garLoopResultBuilder]: At program point L781(line 781) the Hoare annotation is: true [2022-11-18 19:57:06,060 INFO L899 garLoopResultBuilder]: For program point L781-1(line 781) no Hoare annotation was computed. [2022-11-18 19:57:06,061 INFO L895 garLoopResultBuilder]: At program point L634(line 634) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,061 INFO L895 garLoopResultBuilder]: At program point L969(lines 964 972) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,061 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 562 585) no Hoare annotation was computed. [2022-11-18 19:57:06,061 INFO L895 garLoopResultBuilder]: At program point L676(lines 671 678) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,061 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2022-11-18 19:57:06,062 INFO L895 garLoopResultBuilder]: At program point L639(line 639) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,062 INFO L895 garLoopResultBuilder]: At program point L639-1(lines 620 644) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse5 (<= 1 ~waterLevel~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse5 (= ~waterLevel~0 1))) (or .cse4 .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3)))) [2022-11-18 19:57:06,062 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2022-11-18 19:57:06,062 INFO L899 garLoopResultBuilder]: For program point L573-1(lines 573 579) no Hoare annotation was computed. [2022-11-18 19:57:06,062 INFO L895 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not .cse5)) (.cse8 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse10 (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 1))) (.cse11 (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse1 .cse5 .cse6) .cse2 .cse4 .cse7) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse8 .cse9 (and .cse1 .cse10 .cse11)) (or .cse0 .cse2 .cse3 .cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse2 .cse8 .cse9 (and .cse10 (<= 2 ~waterLevel~0) .cse11) (and .cse1 .cse10 .cse11 .cse5 .cse6) .cse7)))) [2022-11-18 19:57:06,062 INFO L899 garLoopResultBuilder]: For program point L763(lines 763 767) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L899 garLoopResultBuilder]: For program point L763-2(lines 763 767) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L899 garLoopResultBuilder]: For program point L978(line 978) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L899 garLoopResultBuilder]: For program point L566-1(lines 565 584) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L899 garLoopResultBuilder]: For program point L628(lines 628 636) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L895 garLoopResultBuilder]: At program point L979(lines 974 981) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,063 INFO L899 garLoopResultBuilder]: For program point L624(lines 624 641) no Hoare annotation was computed. [2022-11-18 19:57:06,063 INFO L895 garLoopResultBuilder]: At program point L769(lines 754 772) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0)) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,064 INFO L895 garLoopResultBuilder]: At program point L59(line 59) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse5 (<= 1 ~waterLevel~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse5 (= ~waterLevel~0 1))) (or .cse4 .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3)))) [2022-11-18 19:57:06,064 INFO L899 garLoopResultBuilder]: For program point L59-1(line 59) no Hoare annotation was computed. [2022-11-18 19:57:06,064 INFO L895 garLoopResultBuilder]: At program point L695(lines 690 698) the Hoare annotation is: (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 (and .cse5 .cse6 (<= 1 ~waterLevel~0)) .cse3) (or .cse7 .cse0 .cse8 .cse4 (and .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse7 .cse0 .cse8 .cse1 .cse2))) [2022-11-18 19:57:06,064 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 562 585) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse2))) [2022-11-18 19:57:06,064 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2022-11-18 19:57:06,065 INFO L895 garLoopResultBuilder]: At program point L877-2(lines 873 884) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-18 19:57:06,065 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 562 585) no Hoare annotation was computed. [2022-11-18 19:57:06,065 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 978) no Hoare annotation was computed. [2022-11-18 19:57:06,065 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 909 917) the Hoare annotation is: true [2022-11-18 19:57:06,065 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 909 917) no Hoare annotation was computed. [2022-11-18 19:57:06,065 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 909 917) no Hoare annotation was computed. [2022-11-18 19:57:06,065 INFO L895 garLoopResultBuilder]: At program point L97(lines 93 99) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 19:57:06,065 INFO L902 garLoopResultBuilder]: At program point L865(lines 846 868) the Hoare annotation is: true [2022-11-18 19:57:06,066 INFO L895 garLoopResultBuilder]: At program point L543(lines 496 544) the Hoare annotation is: false [2022-11-18 19:57:06,066 INFO L899 garLoopResultBuilder]: For program point L498(lines 497 542) no Hoare annotation was computed. [2022-11-18 19:57:06,066 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 538) no Hoare annotation was computed. [2022-11-18 19:57:06,066 INFO L895 garLoopResultBuilder]: At program point L519(line 519) the Hoare annotation is: (let ((.cse3 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and (<= 2 ~waterLevel~0) .cse1 (<= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-18 19:57:06,066 INFO L895 garLoopResultBuilder]: At program point L833(lines 829 835) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 19:57:06,066 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 19:57:06,066 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 19:57:06,066 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L895 garLoopResultBuilder]: At program point L540(lines 497 542) the Hoare annotation is: (let ((.cse3 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and (<= 2 ~waterLevel~0) .cse1 (<= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-18 19:57:06,067 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 513) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L899 garLoopResultBuilder]: For program point L507-1(lines 507 513) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L899 garLoopResultBuilder]: For program point L499(lines 499 503) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L899 garLoopResultBuilder]: For program point L533(lines 533 537) no Hoare annotation was computed. [2022-11-18 19:57:06,067 INFO L895 garLoopResultBuilder]: At program point L533-2(lines 527 538) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 0 ~methaneLevelCritical~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2))) [2022-11-18 19:57:06,067 INFO L895 garLoopResultBuilder]: At program point L112(lines 107 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 19:57:06,068 INFO L902 garLoopResultBuilder]: At program point L843(lines 836 845) the Hoare annotation is: true [2022-11-18 19:57:06,068 INFO L895 garLoopResultBuilder]: At program point L104(lines 100 106) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 19:57:06,068 INFO L899 garLoopResultBuilder]: For program point L517(lines 517 523) no Hoare annotation was computed. [2022-11-18 19:57:06,068 INFO L899 garLoopResultBuilder]: For program point L517-1(lines 517 523) no Hoare annotation was computed. [2022-11-18 19:57:06,068 INFO L902 garLoopResultBuilder]: At program point L546(lines 487 550) the Hoare annotation is: true [2022-11-18 19:57:06,068 INFO L895 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse3 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and (<= 2 ~waterLevel~0) .cse1 (<= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 1 ~waterLevel~0)))) [2022-11-18 19:57:06,068 INFO L899 garLoopResultBuilder]: For program point L856(lines 856 863) no Hoare annotation was computed. [2022-11-18 19:57:06,068 INFO L899 garLoopResultBuilder]: For program point L856-2(lines 856 863) no Hoare annotation was computed. [2022-11-18 19:57:06,068 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 594 618) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0))) [2022-11-18 19:57:06,069 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2022-11-18 19:57:06,069 INFO L899 garLoopResultBuilder]: For program point L661(lines 661 667) no Hoare annotation was computed. [2022-11-18 19:57:06,069 INFO L895 garLoopResultBuilder]: At program point L661-2(lines 654 670) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) (not (<= 0 ~methaneLevelCritical~0))) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) .cse2 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-18 19:57:06,069 INFO L895 garLoopResultBuilder]: At program point L750(lines 735 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 1 ~waterLevel~0)) .cse2))) [2022-11-18 19:57:06,069 INFO L895 garLoopResultBuilder]: At program point L686(lines 679 689) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 0 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)))) [2022-11-18 19:57:06,069 INFO L895 garLoopResultBuilder]: At program point L684(line 684) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2022-11-18 19:57:06,069 INFO L899 garLoopResultBuilder]: For program point L684-1(line 684) no Hoare annotation was computed. [2022-11-18 19:57:06,070 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 748) no Hoare annotation was computed. [2022-11-18 19:57:06,070 INFO L899 garLoopResultBuilder]: For program point L744-2(lines 744 748) no Hoare annotation was computed. [2022-11-18 19:57:06,070 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (not (<= 1 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse1 .cse2))) [2022-11-18 19:57:06,070 INFO L895 garLoopResultBuilder]: At program point L959(lines 950 963) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse14 (<= 2 ~waterLevel~0)) (.cse12 (= 1 ~systemActive~0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse16 (<= 0 ~methaneLevelCritical~0)) (.cse15 (<= ~methaneLevelCritical~0 0))) (let ((.cse3 (not .cse15)) (.cse4 (not .cse16)) (.cse5 (and .cse13 .cse10 .cse14 .cse12 .cse15 .cse16 .cse11)) (.cse2 (not .cse14)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse13 .cse10 .cse14 .cse12 .cse11)) (.cse1 (not .cse12)) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse7 (and .cse10 (not .cse11))) (.cse9 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse2 .cse9) (or .cse0 .cse8 .cse1 .cse6 .cse7 .cse9)))) [2022-11-18 19:57:06,070 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 594 618) no Hoare annotation was computed. [2022-11-18 19:57:06,070 INFO L899 garLoopResultBuilder]: For program point L602(lines 602 610) no Hoare annotation was computed. [2022-11-18 19:57:06,070 INFO L899 garLoopResultBuilder]: For program point L598(lines 598 615) no Hoare annotation was computed. [2022-11-18 19:57:06,071 INFO L895 garLoopResultBuilder]: At program point L650(lines 645 652) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) [2022-11-18 19:57:06,071 INFO L895 garLoopResultBuilder]: At program point L613(line 613) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0))) [2022-11-18 19:57:06,071 INFO L899 garLoopResultBuilder]: For program point L613-1(lines 594 618) no Hoare annotation was computed. [2022-11-18 19:57:06,071 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 885 896) no Hoare annotation was computed. [2022-11-18 19:57:06,071 INFO L899 garLoopResultBuilder]: For program point L889-1(lines 885 896) no Hoare annotation was computed. [2022-11-18 19:57:06,071 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 885 896) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse1 (not (<= ~methaneLevelCritical~0 0)) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 19:57:06,074 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:57:06,076 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 19:57:06,126 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 07:57:06 BoogieIcfgContainer [2022-11-18 19:57:06,135 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 19:57:06,136 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 19:57:06,136 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 19:57:06,136 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 19:57:06,137 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:56:54" (3/4) ... [2022-11-18 19:57:06,140 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 19:57:06,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 19:57:06,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 19:57:06,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 19:57:06,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 19:57:06,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 19:57:06,161 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:57:06,161 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 19:57:06,167 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-18 19:57:06,174 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 19:57:06,174 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 19:57:06,175 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 19:57:06,175 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 19:57:06,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) [2022-11-18 19:57:06,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((((pumpRunning == 0 && 1 == systemActive) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && 0 < tmp + 1) && tmp <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((0 < tmp + 1 && 2 <= waterLevel) && tmp <= 0)) || ((((pumpRunning == 0 && 0 < tmp + 1) && tmp <= 0) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || methaneLevelCritical <= \result) [2022-11-18 19:57:06,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-18 19:57:06,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) [2022-11-18 19:57:06,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && \result == 0)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && \result == 0))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) [2022-11-18 19:57:06,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (2 <= waterLevel && methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical) [2022-11-18 19:57:06,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && ((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= waterLevel) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,223 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((!(tmp == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(0 <= methaneLevelCritical)) [2022-11-18 19:57:06,223 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= tmp___0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 19:57:06,250 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 19:57:06,250 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 19:57:06,251 INFO L158 Benchmark]: Toolchain (without parser) took 13320.16ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 58.7MB in the beginning and 178.5MB in the end (delta: -119.8MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 19:57:06,251 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 92.3MB. Free memory was 49.2MB in the beginning and 49.2MB in the end (delta: 45.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 19:57:06,252 INFO L158 Benchmark]: CACSL2BoogieTranslator took 555.82ms. Allocated memory is still 92.3MB. Free memory was 58.6MB in the beginning and 60.2MB in the end (delta: -1.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,252 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.38ms. Allocated memory is still 92.3MB. Free memory was 60.2MB in the beginning and 58.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,252 INFO L158 Benchmark]: Boogie Preprocessor took 32.13ms. Allocated memory is still 92.3MB. Free memory was 58.1MB in the beginning and 56.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,253 INFO L158 Benchmark]: RCFGBuilder took 617.44ms. Allocated memory is still 92.3MB. Free memory was 56.3MB in the beginning and 39.9MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,253 INFO L158 Benchmark]: TraceAbstraction took 11946.28ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 39.2MB in the beginning and 184.8MB in the end (delta: -145.6MB). Peak memory consumption was 100.3MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,253 INFO L158 Benchmark]: Witness Printer took 114.51ms. Allocated memory is still 209.7MB. Free memory was 184.8MB in the beginning and 178.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 19:57:06,255 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 92.3MB. Free memory was 49.2MB in the beginning and 49.2MB in the end (delta: 45.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 555.82ms. Allocated memory is still 92.3MB. Free memory was 58.6MB in the beginning and 60.2MB in the end (delta: -1.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.38ms. Allocated memory is still 92.3MB. Free memory was 60.2MB in the beginning and 58.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.13ms. Allocated memory is still 92.3MB. Free memory was 58.1MB in the beginning and 56.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 617.44ms. Allocated memory is still 92.3MB. Free memory was 56.3MB in the beginning and 39.9MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11946.28ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 39.2MB in the beginning and 184.8MB in the end (delta: -145.6MB). Peak memory consumption was 100.3MB. Max. memory is 16.1GB. * Witness Printer took 114.51ms. Allocated memory is still 209.7MB. Free memory was 184.8MB in the beginning and 178.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 978]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.8s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1355 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1325 mSDsluCounter, 4274 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2871 mSDsCounter, 284 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1152 IncrementalHoareTripleChecker+Invalid, 1436 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 284 mSolverCounterUnsat, 1403 mSDtfsCounter, 1152 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 565 GetRequests, 449 SyntacticMatches, 6 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=832occurred in iteration=12, InterpolantAutomatonStates: 94, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 13 MinimizatonAttempts, 321 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1663 PreInvPairs, 1838 NumberOfFragments, 1580 HoareAnnotationTreeSize, 1663 FomulaSimplifications, 269 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 42 FomulaSimplificationsInter, 11239 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 1045 NumberOfCodeBlocks, 1045 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1028 ConstructedInterpolants, 0 QuantifiedInterpolants, 1881 SizeOfPredicates, 12 NumberOfNonLiveVariables, 1220 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 186/195 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || methaneLevelCritical <= \result) - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 107]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 620]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 671]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= tmp___0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 645]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (2 <= waterLevel && methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((((pumpRunning == 0 && 1 == systemActive) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && 0 < tmp + 1) && tmp <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((0 < tmp + 1 && 2 <= waterLevel) && tmp <= 0)) || ((((pumpRunning == 0 && 0 < tmp + 1) && tmp <= 0) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 497]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && waterLevel == 1) || ((((2 <= waterLevel && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((!(tmp == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 950]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && \result == 0)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && \result == 0))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= waterLevel) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 775]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 974]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) && ((!(1 == systemActive) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-18 19:57:06,290 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9bf367b-5595-4def-a83d-579caaf8ae92/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE