./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:57:44,076 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:57:44,079 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:57:44,125 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:57:44,126 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:57:44,131 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:57:44,133 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:57:44,136 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:57:44,141 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:57:44,142 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:57:44,144 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:57:44,147 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:57:44,147 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:57:44,153 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:57:44,155 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:57:44,156 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:57:44,159 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:57:44,161 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:57:44,163 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:57:44,167 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:57:44,170 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:57:44,172 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:57:44,174 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:57:44,175 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:57:44,180 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:57:44,185 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:57:44,186 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:57:44,187 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:57:44,189 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:57:44,190 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:57:44,190 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:57:44,191 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:57:44,194 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:57:44,195 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:57:44,198 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:57:44,198 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:57:44,199 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:57:44,199 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:57:44,199 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:57:44,200 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:57:44,201 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:57:44,202 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 20:57:44,245 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:57:44,246 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:57:44,246 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:57:44,247 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:57:44,248 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:57:44,248 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:57:44,249 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:57:44,249 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:57:44,249 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:57:44,249 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:57:44,251 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 20:57:44,251 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:57:44,251 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 20:57:44,252 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:57:44,252 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:57:44,252 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:57:44,252 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:57:44,252 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 20:57:44,253 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:57:44,253 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:57:44,253 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:57:44,253 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:57:44,254 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:57:44,254 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:57:44,254 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:57:44,254 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:57:44,255 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:57:44,255 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:57:44,255 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:57:44,255 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:57:44,256 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:57:44,256 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:57:44,256 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:57:44,257 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf [2022-11-18 20:57:44,544 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:57:44,574 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:57:44,576 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:57:44,578 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:57:44,579 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:57:44,580 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2022-11-18 20:57:44,640 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/data/64e4ce746/7959be27a9f54a0cbba0bb0efe5596ab/FLAG3c5d9a539 [2022-11-18 20:57:45,228 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:57:45,232 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2022-11-18 20:57:45,253 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/data/64e4ce746/7959be27a9f54a0cbba0bb0efe5596ab/FLAG3c5d9a539 [2022-11-18 20:57:45,498 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/data/64e4ce746/7959be27a9f54a0cbba0bb0efe5596ab [2022-11-18 20:57:45,501 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:57:45,502 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:57:45,505 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:57:45,505 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:57:45,508 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:57:45,509 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:57:45" (1/1) ... [2022-11-18 20:57:45,510 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@59a23ff5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:45, skipping insertion in model container [2022-11-18 20:57:45,510 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:57:45" (1/1) ... [2022-11-18 20:57:45,517 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:57:45,562 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:57:45,895 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2022-11-18 20:57:45,899 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:57:45,908 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:57:46,030 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2022-11-18 20:57:46,038 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:57:46,055 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:57:46,057 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46 WrapperNode [2022-11-18 20:57:46,057 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:57:46,059 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:57:46,059 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:57:46,059 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:57:46,066 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,091 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,131 INFO L138 Inliner]: procedures = 57, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 206 [2022-11-18 20:57:46,132 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:57:46,133 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:57:46,133 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:57:46,133 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:57:46,143 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,143 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,154 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,155 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,159 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,165 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,173 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,174 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,176 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:57:46,177 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:57:46,177 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:57:46,178 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:57:46,179 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (1/1) ... [2022-11-18 20:57:46,196 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:57:46,208 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:46,224 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:57:46,231 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:57:46,265 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:57:46,265 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 20:57:46,265 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 20:57:46,265 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 20:57:46,265 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 20:57:46,265 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 20:57:46,266 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 20:57:46,266 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 20:57:46,266 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 20:57:46,266 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:57:46,266 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:57:46,266 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 20:57:46,266 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 20:57:46,267 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:57:46,267 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 20:57:46,267 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 20:57:46,267 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:57:46,267 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:57:46,385 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:57:46,387 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:57:46,757 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:57:46,764 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:57:46,764 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 20:57:46,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:46 BoogieIcfgContainer [2022-11-18 20:57:46,775 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:57:46,777 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:57:46,778 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:57:46,782 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:57:46,782 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:57:45" (1/3) ... [2022-11-18 20:57:46,783 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@558e544 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:57:46, skipping insertion in model container [2022-11-18 20:57:46,783 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:46" (2/3) ... [2022-11-18 20:57:46,784 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@558e544 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:57:46, skipping insertion in model container [2022-11-18 20:57:46,784 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:46" (3/3) ... [2022-11-18 20:57:46,790 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product50.cil.c [2022-11-18 20:57:46,812 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:57:46,812 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:57:46,910 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:57:46,921 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@576e7302, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:57:46,921 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:57:46,928 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 20:57:46,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 20:57:46,940 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:46,941 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:46,942 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:46,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:46,951 INFO L85 PathProgramCache]: Analyzing trace with hash 778842968, now seen corresponding path program 1 times [2022-11-18 20:57:46,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:46,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001628840] [2022-11-18 20:57:46,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:46,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:47,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 20:57:47,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,239 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:47,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:47,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001628840] [2022-11-18 20:57:47,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001628840] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:47,241 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:47,241 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:57:47,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2133769651] [2022-11-18 20:57:47,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:47,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 20:57:47,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:47,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 20:57:47,288 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:57:47,292 INFO L87 Difference]: Start difference. First operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:47,356 INFO L93 Difference]: Finished difference Result 169 states and 230 transitions. [2022-11-18 20:57:47,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 20:57:47,358 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 20:57:47,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:47,373 INFO L225 Difference]: With dead ends: 169 [2022-11-18 20:57:47,373 INFO L226 Difference]: Without dead ends: 80 [2022-11-18 20:57:47,378 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:57:47,382 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:47,384 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:57:47,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-18 20:57:47,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-11-18 20:57:47,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-18 20:57:47,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2022-11-18 20:57:47,450 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 25 [2022-11-18 20:57:47,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:47,450 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2022-11-18 20:57:47,452 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,452 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2022-11-18 20:57:47,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 20:57:47,458 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:47,458 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:47,459 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:57:47,460 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:47,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:47,461 INFO L85 PathProgramCache]: Analyzing trace with hash -1591426498, now seen corresponding path program 1 times [2022-11-18 20:57:47,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:47,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175043225] [2022-11-18 20:57:47,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:47,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:47,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-18 20:57:47,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:47,581 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:47,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175043225] [2022-11-18 20:57:47,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1175043225] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:47,582 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:47,582 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:57:47,582 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014221237] [2022-11-18 20:57:47,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:47,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:57:47,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:47,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:57:47,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:57:47,585 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:47,601 INFO L93 Difference]: Finished difference Result 124 states and 160 transitions. [2022-11-18 20:57:47,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:57:47,602 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 20:57:47,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:47,604 INFO L225 Difference]: With dead ends: 124 [2022-11-18 20:57:47,604 INFO L226 Difference]: Without dead ends: 71 [2022-11-18 20:57:47,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:57:47,606 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 13 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:47,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 163 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:57:47,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-18 20:57:47,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-11-18 20:57:47,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-18 20:57:47,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 91 transitions. [2022-11-18 20:57:47,616 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 91 transitions. Word has length 26 [2022-11-18 20:57:47,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:47,616 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 91 transitions. [2022-11-18 20:57:47,617 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,617 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 91 transitions. [2022-11-18 20:57:47,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-18 20:57:47,618 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:47,618 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:47,619 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:57:47,619 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:47,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:47,620 INFO L85 PathProgramCache]: Analyzing trace with hash 18143891, now seen corresponding path program 1 times [2022-11-18 20:57:47,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:47,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503046712] [2022-11-18 20:57:47,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:47,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:47,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:47,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:47,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:47,755 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:47,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503046712] [2022-11-18 20:57:47,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503046712] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:47,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:47,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:47,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [242719632] [2022-11-18 20:57:47,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:47,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:47,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:47,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:47,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:47,757 INFO L87 Difference]: Start difference. First operand 71 states and 91 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:47,821 INFO L93 Difference]: Finished difference Result 134 states and 175 transitions. [2022-11-18 20:57:47,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:57:47,822 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-18 20:57:47,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:47,823 INFO L225 Difference]: With dead ends: 134 [2022-11-18 20:57:47,824 INFO L226 Difference]: Without dead ends: 71 [2022-11-18 20:57:47,825 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:57:47,826 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 118 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:47,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 218 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:57:47,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-18 20:57:47,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-11-18 20:57:47,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-18 20:57:47,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 90 transitions. [2022-11-18 20:57:47,840 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 90 transitions. Word has length 31 [2022-11-18 20:57:47,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:47,840 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 90 transitions. [2022-11-18 20:57:47,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:57:47,841 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 90 transitions. [2022-11-18 20:57:47,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-18 20:57:47,842 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:47,842 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:47,847 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:57:47,847 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:47,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:47,849 INFO L85 PathProgramCache]: Analyzing trace with hash -26266963, now seen corresponding path program 1 times [2022-11-18 20:57:47,849 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:47,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1628058049] [2022-11-18 20:57:47,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:47,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:47,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:48,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:48,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-18 20:57:48,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,126 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:48,126 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:48,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1628058049] [2022-11-18 20:57:48,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1628058049] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:48,131 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:48,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:48,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790148491] [2022-11-18 20:57:48,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:48,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:48,134 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:48,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:48,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:48,135 INFO L87 Difference]: Start difference. First operand 71 states and 90 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:57:48,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:48,380 INFO L93 Difference]: Finished difference Result 209 states and 267 transitions. [2022-11-18 20:57:48,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:57:48,381 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-11-18 20:57:48,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:48,382 INFO L225 Difference]: With dead ends: 209 [2022-11-18 20:57:48,382 INFO L226 Difference]: Without dead ends: 146 [2022-11-18 20:57:48,383 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:57:48,385 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 167 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:48,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 290 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:57:48,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-11-18 20:57:48,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 140. [2022-11-18 20:57:48,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 109 states have (on average 1.2844036697247707) internal successors, (140), 116 states have internal predecessors, (140), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-11-18 20:57:48,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 173 transitions. [2022-11-18 20:57:48,409 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 173 transitions. Word has length 41 [2022-11-18 20:57:48,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:48,410 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 173 transitions. [2022-11-18 20:57:48,410 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:57:48,410 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 173 transitions. [2022-11-18 20:57:48,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 20:57:48,412 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:48,412 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:48,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:57:48,413 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:48,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:48,413 INFO L85 PathProgramCache]: Analyzing trace with hash -970342054, now seen corresponding path program 1 times [2022-11-18 20:57:48,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:48,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608256655] [2022-11-18 20:57:48,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:48,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:48,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:48,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:57:48,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:48,569 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:48,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608256655] [2022-11-18 20:57:48,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608256655] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:48,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:48,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:57:48,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829009102] [2022-11-18 20:57:48,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:48,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:57:48,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:48,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:57:48,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:57:48,572 INFO L87 Difference]: Start difference. First operand 140 states and 173 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:48,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:48,824 INFO L93 Difference]: Finished difference Result 294 states and 370 transitions. [2022-11-18 20:57:48,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 20:57:48,827 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-11-18 20:57:48,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:48,832 INFO L225 Difference]: With dead ends: 294 [2022-11-18 20:57:48,832 INFO L226 Difference]: Without dead ends: 162 [2022-11-18 20:57:48,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:57:48,841 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 109 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:48,843 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 411 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:57:48,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-11-18 20:57:48,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 142. [2022-11-18 20:57:48,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 111 states have (on average 1.2792792792792793) internal successors, (142), 118 states have internal predecessors, (142), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-11-18 20:57:48,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2022-11-18 20:57:48,878 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 45 [2022-11-18 20:57:48,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:48,881 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2022-11-18 20:57:48,881 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:48,881 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2022-11-18 20:57:48,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 20:57:48,889 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:48,889 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:48,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:57:48,890 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:48,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:48,891 INFO L85 PathProgramCache]: Analyzing trace with hash 718601688, now seen corresponding path program 1 times [2022-11-18 20:57:48,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:48,892 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563194380] [2022-11-18 20:57:48,892 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:48,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:48,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:49,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:57:49,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:49,075 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:49,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563194380] [2022-11-18 20:57:49,075 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [563194380] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:49,076 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:49,076 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:57:49,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545692207] [2022-11-18 20:57:49,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:49,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:57:49,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:49,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:57:49,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:57:49,079 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:49,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:49,322 INFO L93 Difference]: Finished difference Result 284 states and 354 transitions. [2022-11-18 20:57:49,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:57:49,330 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-11-18 20:57:49,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:49,332 INFO L225 Difference]: With dead ends: 284 [2022-11-18 20:57:49,332 INFO L226 Difference]: Without dead ends: 150 [2022-11-18 20:57:49,332 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:57:49,333 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 61 mSDsluCounter, 279 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:49,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 364 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:57:49,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-18 20:57:49,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 145. [2022-11-18 20:57:49,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2719298245614035) internal successors, (145), 121 states have internal predecessors, (145), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-11-18 20:57:49,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 178 transitions. [2022-11-18 20:57:49,374 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 178 transitions. Word has length 45 [2022-11-18 20:57:49,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:49,374 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 178 transitions. [2022-11-18 20:57:49,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:49,375 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 178 transitions. [2022-11-18 20:57:49,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 20:57:49,377 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:49,377 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:49,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:57:49,378 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:49,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:49,378 INFO L85 PathProgramCache]: Analyzing trace with hash -547640228, now seen corresponding path program 1 times [2022-11-18 20:57:49,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:49,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346836665] [2022-11-18 20:57:49,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:49,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:49,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:49,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:57:49,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:49,515 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:49,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1346836665] [2022-11-18 20:57:49,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1346836665] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:49,516 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:49,516 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:49,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236926563] [2022-11-18 20:57:49,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:49,517 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:49,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:49,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:49,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:49,519 INFO L87 Difference]: Start difference. First operand 145 states and 178 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:49,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:49,751 INFO L93 Difference]: Finished difference Result 407 states and 521 transitions. [2022-11-18 20:57:49,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:57:49,752 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-11-18 20:57:49,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:49,754 INFO L225 Difference]: With dead ends: 407 [2022-11-18 20:57:49,754 INFO L226 Difference]: Without dead ends: 270 [2022-11-18 20:57:49,755 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:57:49,761 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 201 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:49,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 304 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:57:49,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-11-18 20:57:49,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 262. [2022-11-18 20:57:49,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 203 states have (on average 1.2610837438423645) internal successors, (256), 214 states have internal predecessors, (256), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-11-18 20:57:49,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 329 transitions. [2022-11-18 20:57:49,801 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 329 transitions. Word has length 45 [2022-11-18 20:57:49,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:49,801 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 329 transitions. [2022-11-18 20:57:49,801 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:57:49,802 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 329 transitions. [2022-11-18 20:57:49,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:57:49,803 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:49,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:49,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:57:49,803 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:49,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:49,804 INFO L85 PathProgramCache]: Analyzing trace with hash 2090838197, now seen corresponding path program 1 times [2022-11-18 20:57:49,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:49,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998869989] [2022-11-18 20:57:49,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:49,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:49,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:49,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:57:49,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-18 20:57:49,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:49,902 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:49,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:49,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998869989] [2022-11-18 20:57:49,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998869989] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:49,903 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:49,903 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:57:49,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145871229] [2022-11-18 20:57:49,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:49,904 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:57:49,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:49,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:57:49,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:57:49,905 INFO L87 Difference]: Start difference. First operand 262 states and 329 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:57:50,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:50,179 INFO L93 Difference]: Finished difference Result 532 states and 679 transitions. [2022-11-18 20:57:50,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-18 20:57:50,180 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-11-18 20:57:50,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:50,186 INFO L225 Difference]: With dead ends: 532 [2022-11-18 20:57:50,186 INFO L226 Difference]: Without dead ends: 278 [2022-11-18 20:57:50,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:57:50,189 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 116 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:50,189 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 339 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:57:50,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2022-11-18 20:57:50,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 258. [2022-11-18 20:57:50,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 199 states have (on average 1.2261306532663316) internal successors, (244), 210 states have internal predecessors, (244), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-11-18 20:57:50,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 317 transitions. [2022-11-18 20:57:50,242 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 317 transitions. Word has length 47 [2022-11-18 20:57:50,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:50,243 INFO L495 AbstractCegarLoop]: Abstraction has 258 states and 317 transitions. [2022-11-18 20:57:50,243 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:57:50,244 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 317 transitions. [2022-11-18 20:57:50,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-18 20:57:50,245 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:50,246 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:50,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:57:50,246 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:50,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:50,247 INFO L85 PathProgramCache]: Analyzing trace with hash -1265697662, now seen corresponding path program 1 times [2022-11-18 20:57:50,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:50,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776233814] [2022-11-18 20:57:50,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:50,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:50,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:57:50,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 20:57:50,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 20:57:50,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,361 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:50,361 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:50,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776233814] [2022-11-18 20:57:50,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [776233814] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:50,362 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:50,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:50,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1777005640] [2022-11-18 20:57:50,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:50,363 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:50,363 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:50,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:50,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:50,364 INFO L87 Difference]: Start difference. First operand 258 states and 317 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:57:50,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:50,668 INFO L93 Difference]: Finished difference Result 477 states and 602 transitions. [2022-11-18 20:57:50,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:57:50,668 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2022-11-18 20:57:50,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:50,674 INFO L225 Difference]: With dead ends: 477 [2022-11-18 20:57:50,674 INFO L226 Difference]: Without dead ends: 475 [2022-11-18 20:57:50,674 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:57:50,677 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 279 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 282 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:50,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [282 Valid, 238 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:57:50,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2022-11-18 20:57:50,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 435. [2022-11-18 20:57:50,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 435 states, 338 states have (on average 1.2307692307692308) internal successors, (416), 359 states have internal predecessors, (416), 48 states have call successors, (48), 42 states have call predecessors, (48), 48 states have return successors, (90), 47 states have call predecessors, (90), 48 states have call successors, (90) [2022-11-18 20:57:50,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 554 transitions. [2022-11-18 20:57:50,771 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 554 transitions. Word has length 49 [2022-11-18 20:57:50,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:50,772 INFO L495 AbstractCegarLoop]: Abstraction has 435 states and 554 transitions. [2022-11-18 20:57:50,772 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:57:50,772 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 554 transitions. [2022-11-18 20:57:50,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-11-18 20:57:50,776 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:50,777 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:50,777 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 20:57:50,777 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:50,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:50,778 INFO L85 PathProgramCache]: Analyzing trace with hash 2030253660, now seen corresponding path program 1 times [2022-11-18 20:57:50,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:50,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [407537337] [2022-11-18 20:57:50,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:50,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:50,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:57:50,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:50,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:57:50,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:50,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 20:57:50,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-18 20:57:51,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-18 20:57:51,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,009 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-18 20:57:51,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:51,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [407537337] [2022-11-18 20:57:51,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [407537337] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:57:51,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [344998847] [2022-11-18 20:57:51,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:51,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:51,011 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:51,014 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:57:51,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:57:51,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,162 INFO L263 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-18 20:57:51,168 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:57:51,302 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:51,305 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:57:51,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [344998847] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:51,305 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:57:51,305 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-11-18 20:57:51,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358171479] [2022-11-18 20:57:51,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:51,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:57:51,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:51,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:57:51,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:57:51,307 INFO L87 Difference]: Start difference. First operand 435 states and 554 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 20:57:51,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:51,370 INFO L93 Difference]: Finished difference Result 764 states and 988 transitions. [2022-11-18 20:57:51,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:57:51,371 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-11-18 20:57:51,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:51,373 INFO L225 Difference]: With dead ends: 764 [2022-11-18 20:57:51,373 INFO L226 Difference]: Without dead ends: 386 [2022-11-18 20:57:51,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:57:51,375 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 38 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:51,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 194 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:57:51,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 386 states. [2022-11-18 20:57:51,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 386 to 386. [2022-11-18 20:57:51,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 386 states, 300 states have (on average 1.2266666666666666) internal successors, (368), 319 states have internal predecessors, (368), 43 states have call successors, (43), 37 states have call predecessors, (43), 42 states have return successors, (68), 43 states have call predecessors, (68), 43 states have call successors, (68) [2022-11-18 20:57:51,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 386 states and 479 transitions. [2022-11-18 20:57:51,431 INFO L78 Accepts]: Start accepts. Automaton has 386 states and 479 transitions. Word has length 88 [2022-11-18 20:57:51,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:51,432 INFO L495 AbstractCegarLoop]: Abstraction has 386 states and 479 transitions. [2022-11-18 20:57:51,432 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 20:57:51,432 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 479 transitions. [2022-11-18 20:57:51,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-18 20:57:51,433 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:51,434 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:51,444 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:57:51,639 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:51,640 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:51,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:51,640 INFO L85 PathProgramCache]: Analyzing trace with hash 1047652398, now seen corresponding path program 1 times [2022-11-18 20:57:51,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:51,640 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [554809341] [2022-11-18 20:57:51,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:51,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:51,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:57:51,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:51,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:57:51,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 20:57:51,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:57:51,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:51,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-18 20:57:51,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:51,941 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 20:57:51,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:51,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [554809341] [2022-11-18 20:57:51,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [554809341] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:57:51,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [907096105] [2022-11-18 20:57:51,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:51,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:51,942 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:51,943 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:57:51,967 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:57:52,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:52,047 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-18 20:57:52,050 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:57:52,474 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-18 20:57:52,474 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:57:52,737 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-18 20:57:52,738 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [907096105] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-18 20:57:52,738 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-18 20:57:52,738 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2022-11-18 20:57:52,738 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790156072] [2022-11-18 20:57:52,738 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:52,739 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:57:52,739 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:52,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:57:52,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:57:52,740 INFO L87 Difference]: Start difference. First operand 386 states and 479 transitions. Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-18 20:57:52,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:52,914 INFO L93 Difference]: Finished difference Result 1106 states and 1412 transitions. [2022-11-18 20:57:52,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:57:52,915 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 91 [2022-11-18 20:57:52,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:52,920 INFO L225 Difference]: With dead ends: 1106 [2022-11-18 20:57:52,921 INFO L226 Difference]: Without dead ends: 728 [2022-11-18 20:57:52,922 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 186 SyntacticMatches, 3 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=46, Invalid=194, Unknown=0, NotChecked=0, Total=240 [2022-11-18 20:57:52,923 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 52 mSDsluCounter, 337 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:52,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 433 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:57:52,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2022-11-18 20:57:53,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 652. [2022-11-18 20:57:53,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 652 states, 500 states have (on average 1.196) internal successors, (598), 534 states have internal predecessors, (598), 75 states have call successors, (75), 65 states have call predecessors, (75), 76 states have return successors, (119), 75 states have call predecessors, (119), 75 states have call successors, (119) [2022-11-18 20:57:53,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 792 transitions. [2022-11-18 20:57:53,028 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 792 transitions. Word has length 91 [2022-11-18 20:57:53,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:53,028 INFO L495 AbstractCegarLoop]: Abstraction has 652 states and 792 transitions. [2022-11-18 20:57:53,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-18 20:57:53,029 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 792 transitions. [2022-11-18 20:57:53,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-18 20:57:53,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:53,037 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:53,048 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:57:53,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:53,242 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:53,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:53,243 INFO L85 PathProgramCache]: Analyzing trace with hash 1543524338, now seen corresponding path program 1 times [2022-11-18 20:57:53,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:53,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [251897123] [2022-11-18 20:57:53,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:53,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:53,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:57:53,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:57:53,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 20:57:53,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:57:53,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 20:57:53,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-18 20:57:53,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:53,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-18 20:57:53,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,492 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 20:57:53,493 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:53,493 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [251897123] [2022-11-18 20:57:53,493 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [251897123] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:57:53,493 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1998722342] [2022-11-18 20:57:53,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:53,494 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:53,494 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:53,495 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:57:53,517 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-18 20:57:53,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:53,598 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-18 20:57:53,601 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:57:53,698 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:57:53,699 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:57:53,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1998722342] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:53,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:57:53,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-11-18 20:57:53,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756945876] [2022-11-18 20:57:53,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:53,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:57:53,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:53,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:57:53,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:57:53,701 INFO L87 Difference]: Start difference. First operand 652 states and 792 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-18 20:57:53,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:53,908 INFO L93 Difference]: Finished difference Result 1673 states and 2133 transitions. [2022-11-18 20:57:53,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:57:53,909 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 95 [2022-11-18 20:57:53,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:53,915 INFO L225 Difference]: With dead ends: 1673 [2022-11-18 20:57:53,915 INFO L226 Difference]: Without dead ends: 1125 [2022-11-18 20:57:53,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 107 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2022-11-18 20:57:53,919 INFO L413 NwaCegarLoop]: 162 mSDtfsCounter, 173 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 634 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:53,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 634 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:57:53,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2022-11-18 20:57:54,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 920. [2022-11-18 20:57:54,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 920 states, 703 states have (on average 1.1963015647226174) internal successors, (841), 750 states have internal predecessors, (841), 107 states have call successors, (107), 95 states have call predecessors, (107), 109 states have return successors, (173), 102 states have call predecessors, (173), 107 states have call successors, (173) [2022-11-18 20:57:54,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 920 states to 920 states and 1121 transitions. [2022-11-18 20:57:54,047 INFO L78 Accepts]: Start accepts. Automaton has 920 states and 1121 transitions. Word has length 95 [2022-11-18 20:57:54,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:54,047 INFO L495 AbstractCegarLoop]: Abstraction has 920 states and 1121 transitions. [2022-11-18 20:57:54,047 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-18 20:57:54,048 INFO L276 IsEmpty]: Start isEmpty. Operand 920 states and 1121 transitions. [2022-11-18 20:57:54,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-18 20:57:54,050 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:54,050 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:54,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-18 20:57:54,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:54,258 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:54,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:54,258 INFO L85 PathProgramCache]: Analyzing trace with hash 1409510832, now seen corresponding path program 1 times [2022-11-18 20:57:54,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:54,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301441480] [2022-11-18 20:57:54,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:54,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:54,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:57:54,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:57:54,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 20:57:54,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:57:54,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 20:57:54,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-18 20:57:54,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:54,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-18 20:57:54,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,424 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-18 20:57:54,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:54,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301441480] [2022-11-18 20:57:54,424 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301441480] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:57:54,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2053266771] [2022-11-18 20:57:54,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:54,425 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:57:54,425 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:54,426 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:57:54,455 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-18 20:57:54,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:54,535 INFO L263 TraceCheckSpWp]: Trace formula consists of 337 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-18 20:57:54,540 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:57:54,590 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-18 20:57:54,590 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:57:54,591 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2053266771] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:54,591 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:57:54,591 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-11-18 20:57:54,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [861523694] [2022-11-18 20:57:54,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:54,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:54,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:54,595 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:54,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:57:54,596 INFO L87 Difference]: Start difference. First operand 920 states and 1121 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-18 20:57:54,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:54,674 INFO L93 Difference]: Finished difference Result 1261 states and 1532 transitions. [2022-11-18 20:57:54,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:57:54,674 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 95 [2022-11-18 20:57:54,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:54,675 INFO L225 Difference]: With dead ends: 1261 [2022-11-18 20:57:54,675 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 20:57:54,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:57:54,681 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 36 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:54,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 319 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:57:54,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 20:57:54,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 20:57:54,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:57:54,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 20:57:54,683 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 95 [2022-11-18 20:57:54,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:54,684 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 20:57:54,684 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-18 20:57:54,684 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 20:57:54,684 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 20:57:54,687 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 20:57:54,693 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-18 20:57:54,893 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-18 20:57:54,895 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 20:57:58,929 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 371 377) no Hoare annotation was computed. [2022-11-18 20:57:58,929 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 371 377) the Hoare annotation is: true [2022-11-18 20:57:58,930 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 264 275) the Hoare annotation is: (let ((.cse0 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse1 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (<= 2 ~waterLevel~0)) (not (<= 1 ~pumpRunning~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= ~pumpRunning~0 0)) (not (<= 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-18 20:57:58,930 INFO L899 garLoopResultBuilder]: For program point L268-1(lines 264 275) no Hoare annotation was computed. [2022-11-18 20:57:58,930 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 264 275) no Hoare annotation was computed. [2022-11-18 20:57:58,930 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 276 284) the Hoare annotation is: true [2022-11-18 20:57:58,930 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 276 284) no Hoare annotation was computed. [2022-11-18 20:57:58,930 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 276 284) no Hoare annotation was computed. [2022-11-18 20:57:58,931 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse0 .cse5) (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)) .cse1)))) [2022-11-18 20:57:58,931 INFO L899 garLoopResultBuilder]: For program point L209-1(line 209) no Hoare annotation was computed. [2022-11-18 20:57:58,931 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:57:58,931 INFO L895 garLoopResultBuilder]: At program point L424-1(lines 405 429) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse0 .cse5) (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)) .cse1)))) [2022-11-18 20:57:58,932 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 347 370) no Hoare annotation was computed. [2022-11-18 20:57:58,932 INFO L899 garLoopResultBuilder]: For program point L358-1(lines 358 364) no Hoare annotation was computed. [2022-11-18 20:57:58,932 INFO L899 garLoopResultBuilder]: For program point L986(line 986) no Hoare annotation was computed. [2022-11-18 20:57:58,932 INFO L895 garLoopResultBuilder]: At program point L536(lines 521 539) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse2) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse3))) [2022-11-18 20:57:58,932 INFO L895 garLoopResultBuilder]: At program point L462(lines 457 465) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse3 .cse4) (or .cse7 .cse8 .cse9 (not (= |old(~waterLevel~0)| 1)) .cse3) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse7 .cse8 (and (<= 1 ~pumpRunning~0) .cse9 (<= 2 ~waterLevel~0) .cse10) .cse11 (and .cse1 .cse2 .cse10) .cse3)) (or .cse7 .cse8 .cse11 .cse5 .cse6 .cse3))) [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L351-1(lines 350 369) no Hoare annotation was computed. [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L413(lines 413 421) no Hoare annotation was computed. [2022-11-18 20:57:58,933 INFO L895 garLoopResultBuilder]: At program point L987(lines 982 989) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L409(lines 409 426) no Hoare annotation was computed. [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 225) no Hoare annotation was computed. [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 248) no Hoare annotation was computed. [2022-11-18 20:57:58,933 INFO L899 garLoopResultBuilder]: For program point L211(lines 211 228) no Hoare annotation was computed. [2022-11-18 20:57:58,934 INFO L895 garLoopResultBuilder]: At program point L244-2(lines 240 251) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse1 .cse2) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-18 20:57:58,934 INFO L895 garLoopResultBuilder]: At program point L211-1(lines 203 231) the Hoare annotation is: (let ((.cse12 (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1|)) (.cse13 (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (and .cse12 .cse13)) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (= 0 ~systemActive~0)) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 (and .cse7 .cse8 (= ~waterLevel~0 1)) .cse1 .cse2 .cse6) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and .cse7 .cse8 .cse9) (and (<= 1 ~pumpRunning~0) .cse9) .cse6 .cse10)) (or .cse11 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse7 .cse8 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse6 .cse10) (or .cse0 .cse1 (and .cse8 .cse12 .cse13) .cse3 .cse5 .cse6 .cse10) (or .cse11 .cse3 .cse4 .cse5 .cse6 .cse10)))) [2022-11-18 20:57:58,934 INFO L895 garLoopResultBuilder]: At program point L443(lines 438 445) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0))) [2022-11-18 20:57:58,934 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-11-18 20:57:58,934 INFO L899 garLoopResultBuilder]: For program point L530(lines 530 534) no Hoare annotation was computed. [2022-11-18 20:57:58,935 INFO L895 garLoopResultBuilder]: At program point L336(lines 331 339) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2 .cse3))) [2022-11-18 20:57:58,935 INFO L899 garLoopResultBuilder]: For program point L530-2(lines 530 534) no Hoare annotation was computed. [2022-11-18 20:57:58,935 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 347 370) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse4 (and (= ~pumpRunning~0 0) .cse5 .cse1) (not (<= 1 |old(~waterLevel~0)|)) .cse2))) [2022-11-18 20:57:58,935 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 347 370) no Hoare annotation was computed. [2022-11-18 20:57:58,935 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 986) no Hoare annotation was computed. [2022-11-18 20:57:58,936 INFO L895 garLoopResultBuilder]: At program point L419(line 419) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:57:58,936 INFO L902 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2022-11-18 20:57:58,936 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2022-11-18 20:57:58,936 INFO L899 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2022-11-18 20:57:58,936 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 90 119) the Hoare annotation is: true [2022-11-18 20:57:58,936 INFO L902 garLoopResultBuilder]: At program point L115(lines 90 119) the Hoare annotation is: true [2022-11-18 20:57:58,936 INFO L899 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2022-11-18 20:57:58,936 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2022-11-18 20:57:58,936 INFO L902 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2022-11-18 20:57:58,936 INFO L899 garLoopResultBuilder]: For program point L101(line 101) no Hoare annotation was computed. [2022-11-18 20:57:58,937 INFO L902 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2022-11-18 20:57:58,937 INFO L895 garLoopResultBuilder]: At program point L151(lines 147 153) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 20:57:58,937 INFO L899 garLoopResultBuilder]: For program point L597(lines 597 601) no Hoare annotation was computed. [2022-11-18 20:57:58,937 INFO L895 garLoopResultBuilder]: At program point L597-2(lines 589 602) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-18 20:57:58,937 INFO L899 garLoopResultBuilder]: For program point L560(lines 559 606) no Hoare annotation was computed. [2022-11-18 20:57:58,937 INFO L899 garLoopResultBuilder]: For program point L589(lines 589 602) no Hoare annotation was computed. [2022-11-18 20:57:58,937 INFO L895 garLoopResultBuilder]: At program point L581(line 581) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-18 20:57:58,938 INFO L902 garLoopResultBuilder]: At program point L164(lines 156 166) the Hoare annotation is: true [2022-11-18 20:57:58,938 INFO L902 garLoopResultBuilder]: At program point L610(lines 549 614) the Hoare annotation is: true [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 575) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L569-1(lines 569 575) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 184) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L561(lines 561 565) no Hoare annotation was computed. [2022-11-18 20:57:58,938 INFO L899 garLoopResultBuilder]: For program point L177-2(lines 177 184) no Hoare annotation was computed. [2022-11-18 20:57:58,939 INFO L895 garLoopResultBuilder]: At program point L545(lines 540 547) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-18 20:57:58,944 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 20:57:58,944 INFO L895 garLoopResultBuilder]: At program point L607(lines 558 608) the Hoare annotation is: false [2022-11-18 20:57:58,944 INFO L902 garLoopResultBuilder]: At program point L186(lines 167 189) the Hoare annotation is: true [2022-11-18 20:57:58,945 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 20:57:58,945 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 20:57:58,945 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 585) no Hoare annotation was computed. [2022-11-18 20:57:58,946 INFO L899 garLoopResultBuilder]: For program point L579-1(lines 579 585) no Hoare annotation was computed. [2022-11-18 20:57:58,946 INFO L895 garLoopResultBuilder]: At program point L604(lines 559 606) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-18 20:57:58,946 INFO L895 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-18 20:57:58,946 INFO L895 garLoopResultBuilder]: At program point L200(lines 195 202) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 20:57:58,947 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 20:57:58,947 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 379 403) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-11-18 20:57:58,947 INFO L895 garLoopResultBuilder]: At program point L393(line 393) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) [2022-11-18 20:57:58,947 INFO L895 garLoopResultBuilder]: At program point L517(lines 502 520) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0)) (and .cse0 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-11-18 20:57:58,948 INFO L899 garLoopResultBuilder]: For program point L387(lines 387 395) no Hoare annotation was computed. [2022-11-18 20:57:58,949 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 327) no Hoare annotation was computed. [2022-11-18 20:57:58,949 INFO L899 garLoopResultBuilder]: For program point L383(lines 383 400) no Hoare annotation was computed. [2022-11-18 20:57:58,950 INFO L899 garLoopResultBuilder]: For program point L511(lines 511 515) no Hoare annotation was computed. [2022-11-18 20:57:58,950 INFO L899 garLoopResultBuilder]: For program point L511-2(lines 511 515) no Hoare annotation was computed. [2022-11-18 20:57:58,950 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 379 403) no Hoare annotation was computed. [2022-11-18 20:57:58,950 INFO L895 garLoopResultBuilder]: At program point L435(lines 430 437) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-18 20:57:58,950 INFO L895 garLoopResultBuilder]: At program point L398(line 398) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-18 20:57:58,951 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 379 403) no Hoare annotation was computed. [2022-11-18 20:57:58,952 INFO L895 garLoopResultBuilder]: At program point L326(lines 317 330) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-11-18 20:57:58,953 INFO L899 garLoopResultBuilder]: For program point L256-1(lines 252 263) no Hoare annotation was computed. [2022-11-18 20:57:58,953 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 252 263) no Hoare annotation was computed. [2022-11-18 20:57:58,953 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 252 263) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1) .cse3) (or (not (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse4))) [2022-11-18 20:57:58,956 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:58,958 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:57:59,006 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:57:59 BoogieIcfgContainer [2022-11-18 20:57:59,013 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:57:59,013 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:57:59,013 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:57:59,014 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:57:59,014 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:46" (3/4) ... [2022-11-18 20:57:59,017 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 20:57:59,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 20:57:59,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 20:57:59,026 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 20:57:59,026 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 20:57:59,026 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 20:57:59,026 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:57:59,026 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 20:57:59,041 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-18 20:57:59,041 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 20:57:59,041 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 20:57:59,042 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:57:59,042 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:57:59,069 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 20:57:59,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 20:57:59,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 20:57:59,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-11-18 20:57:59,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-18 20:57:59,073 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-18 20:57:59,074 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-11-18 20:57:59,075 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical <= 0)) || (0 <= tmp && tmp <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && 0 <= tmp) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || (0 <= tmp && tmp <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 20:57:59,075 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-18 20:57:59,075 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 20:57:59,076 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && !(\result == 0))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-18 20:57:59,077 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) [2022-11-18 20:57:59,077 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 20:57:59,077 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-18 20:57:59,077 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-18 20:57:59,078 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-18 20:57:59,119 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:57:59,119 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:57:59,120 INFO L158 Benchmark]: Toolchain (without parser) took 13617.71ms. Allocated memory was 98.6MB in the beginning and 211.8MB in the end (delta: 113.2MB). Free memory was 62.4MB in the beginning and 133.7MB in the end (delta: -71.2MB). Peak memory consumption was 42.3MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,120 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 98.6MB. Free memory is still 79.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:57:59,121 INFO L158 Benchmark]: CACSL2BoogieTranslator took 553.38ms. Allocated memory is still 98.6MB. Free memory was 62.2MB in the beginning and 65.9MB in the end (delta: -3.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,121 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.40ms. Allocated memory is still 98.6MB. Free memory was 65.9MB in the beginning and 63.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,122 INFO L158 Benchmark]: Boogie Preprocessor took 43.66ms. Allocated memory is still 98.6MB. Free memory was 63.5MB in the beginning and 62.0MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:57:59,122 INFO L158 Benchmark]: RCFGBuilder took 597.41ms. Allocated memory is still 98.6MB. Free memory was 62.0MB in the beginning and 45.6MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,123 INFO L158 Benchmark]: TraceAbstraction took 12235.83ms. Allocated memory was 98.6MB in the beginning and 211.8MB in the end (delta: 113.2MB). Free memory was 45.0MB in the beginning and 138.9MB in the end (delta: -94.0MB). Peak memory consumption was 99.0MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,124 INFO L158 Benchmark]: Witness Printer took 106.09ms. Allocated memory is still 211.8MB. Free memory was 138.9MB in the beginning and 133.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 20:57:59,128 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 98.6MB. Free memory is still 79.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 553.38ms. Allocated memory is still 98.6MB. Free memory was 62.2MB in the beginning and 65.9MB in the end (delta: -3.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.40ms. Allocated memory is still 98.6MB. Free memory was 65.9MB in the beginning and 63.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.66ms. Allocated memory is still 98.6MB. Free memory was 63.5MB in the beginning and 62.0MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 597.41ms. Allocated memory is still 98.6MB. Free memory was 62.0MB in the beginning and 45.6MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 12235.83ms. Allocated memory was 98.6MB in the beginning and 211.8MB in the end (delta: 113.2MB). Free memory was 45.0MB in the beginning and 138.9MB in the end (delta: -94.0MB). Peak memory consumption was 99.0MB. Max. memory is 16.1GB. * Witness Printer took 106.09ms. Allocated memory is still 211.8MB. Free memory was 138.9MB in the beginning and 133.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 986]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.1s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1389 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1363 mSDsluCounter, 4019 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2678 mSDsCounter, 273 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 953 IncrementalHoareTripleChecker+Invalid, 1226 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 273 mSolverCounterUnsat, 1341 mSDtfsCounter, 953 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 667 GetRequests, 565 SyntacticMatches, 6 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 108 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=920occurred in iteration=12, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 380 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1455 PreInvPairs, 1607 NumberOfFragments, 1549 HoareAnnotationTreeSize, 1455 FomulaSimplifications, 212 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 10595 FormulaSimplificationTreeSizeReductionInter, 3.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.0s InterpolantComputationTime, 1092 NumberOfCodeBlocks, 1092 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1165 ConstructedInterpolants, 0 QuantifiedInterpolants, 2766 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 31 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 256/268 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 90]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical <= 0)) || (0 <= tmp && tmp <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && 0 <= tmp) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || (0 <= tmp && tmp <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && !(\result == 0))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-18 20:57:59,180 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99589242-399c-4e6e-97a2-20f8b3ee9d14/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE