./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 19:53:56,461 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 19:53:56,464 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 19:53:56,497 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 19:53:56,498 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 19:53:56,500 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 19:53:56,501 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 19:53:56,504 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 19:53:56,506 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 19:53:56,507 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 19:53:56,509 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 19:53:56,510 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 19:53:56,511 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 19:53:56,512 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 19:53:56,514 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 19:53:56,516 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 19:53:56,517 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 19:53:56,518 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 19:53:56,520 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 19:53:56,523 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 19:53:56,525 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 19:53:56,526 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 19:53:56,528 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 19:53:56,529 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 19:53:56,533 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 19:53:56,534 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 19:53:56,534 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 19:53:56,535 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 19:53:56,536 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 19:53:56,537 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 19:53:56,538 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 19:53:56,539 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 19:53:56,540 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 19:53:56,541 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 19:53:56,543 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 19:53:56,544 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 19:53:56,545 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 19:53:56,545 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 19:53:56,546 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 19:53:56,547 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 19:53:56,548 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 19:53:56,549 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 19:53:56,577 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 19:53:56,577 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 19:53:56,578 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 19:53:56,578 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 19:53:56,579 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 19:53:56,579 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 19:53:56,580 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 19:53:56,581 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 19:53:56,581 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 19:53:56,582 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 19:53:56,582 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 19:53:56,582 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 19:53:56,583 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 19:53:56,583 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 19:53:56,583 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 19:53:56,584 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 19:53:56,584 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 19:53:56,584 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 19:53:56,585 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 19:53:56,585 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 19:53:56,586 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 19:53:56,586 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 19:53:56,586 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 19:53:56,587 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 19:53:56,587 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 19:53:56,587 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 19:53:56,588 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 19:53:56,588 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 19:53:56,589 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 19:53:56,589 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 19:53:56,589 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 19:53:56,590 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 19:53:56,590 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 19:53:56,590 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 [2022-11-18 19:53:56,900 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 19:53:56,928 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 19:53:56,931 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 19:53:56,933 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 19:53:56,934 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 19:53:56,936 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-11-18 19:53:57,035 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/data/de42ee252/7e38cf777172444d9d68824302f17793/FLAG3ad8e4ad5 [2022-11-18 19:53:57,695 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 19:53:57,695 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-11-18 19:53:57,715 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/data/de42ee252/7e38cf777172444d9d68824302f17793/FLAG3ad8e4ad5 [2022-11-18 19:53:57,997 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/data/de42ee252/7e38cf777172444d9d68824302f17793 [2022-11-18 19:53:58,003 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 19:53:58,005 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 19:53:58,011 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 19:53:58,011 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 19:53:58,015 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 19:53:58,016 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 07:53:57" (1/1) ... [2022-11-18 19:53:58,018 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@c968782 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58, skipping insertion in model container [2022-11-18 19:53:58,018 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 07:53:57" (1/1) ... [2022-11-18 19:53:58,028 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 19:53:58,102 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 19:53:58,634 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-11-18 19:53:58,647 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 19:53:58,665 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 19:53:58,741 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-11-18 19:53:58,744 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 19:53:58,763 INFO L208 MainTranslator]: Completed translation [2022-11-18 19:53:58,764 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58 WrapperNode [2022-11-18 19:53:58,764 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 19:53:58,765 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 19:53:58,765 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 19:53:58,766 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 19:53:58,776 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,805 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,852 INFO L138 Inliner]: procedures = 53, calls = 98, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 195 [2022-11-18 19:53:58,852 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 19:53:58,854 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 19:53:58,854 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 19:53:58,854 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 19:53:58,865 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,865 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,882 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,882 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,886 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,892 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,893 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,895 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,913 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 19:53:58,914 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 19:53:58,915 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 19:53:58,915 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 19:53:58,924 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (1/1) ... [2022-11-18 19:53:58,932 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 19:53:58,947 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:53:58,964 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 19:53:58,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 19:53:59,020 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 19:53:59,021 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 19:53:59,021 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 19:53:59,022 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 19:53:59,022 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 19:53:59,022 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 19:53:59,022 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 19:53:59,022 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 19:53:59,023 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 19:53:59,023 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:53:59,023 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:53:59,024 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 19:53:59,024 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 19:53:59,024 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 19:53:59,024 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 19:53:59,025 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 19:53:59,025 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 19:53:59,025 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 19:53:59,159 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 19:53:59,162 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 19:53:59,535 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 19:53:59,543 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 19:53:59,543 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 19:53:59,546 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:53:59 BoogieIcfgContainer [2022-11-18 19:53:59,546 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 19:53:59,549 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 19:53:59,549 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 19:53:59,554 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 19:53:59,554 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 07:53:57" (1/3) ... [2022-11-18 19:53:59,555 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7445e7dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 07:53:59, skipping insertion in model container [2022-11-18 19:53:59,555 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 07:53:58" (2/3) ... [2022-11-18 19:53:59,556 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7445e7dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 07:53:59, skipping insertion in model container [2022-11-18 19:53:59,556 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:53:59" (3/3) ... [2022-11-18 19:53:59,557 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product37.cil.c [2022-11-18 19:53:59,581 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 19:53:59,581 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 19:53:59,645 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 19:53:59,653 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7149040b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 19:53:59,653 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 19:53:59,659 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 66 states have (on average 1.393939393939394) internal successors, (92), 74 states have internal predecessors, (92), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-18 19:53:59,671 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 19:53:59,672 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:53:59,672 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:53:59,673 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:53:59,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:53:59,680 INFO L85 PathProgramCache]: Analyzing trace with hash -817040355, now seen corresponding path program 1 times [2022-11-18 19:53:59,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:53:59,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380221798] [2022-11-18 19:53:59,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:53:59,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:53:59,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:53:59,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 19:53:59,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:53:59,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:53:59,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:53:59,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380221798] [2022-11-18 19:53:59,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380221798] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:53:59,956 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:53:59,957 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 19:53:59,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378966752] [2022-11-18 19:53:59,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:53:59,964 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 19:53:59,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:00,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 19:54:00,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 19:54:00,014 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.393939393939394) internal successors, (92), 74 states have internal predecessors, (92), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:00,083 INFO L93 Difference]: Finished difference Result 166 states and 227 transitions. [2022-11-18 19:54:00,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 19:54:00,088 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 19:54:00,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:00,103 INFO L225 Difference]: With dead ends: 166 [2022-11-18 19:54:00,104 INFO L226 Difference]: Without dead ends: 78 [2022-11-18 19:54:00,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 19:54:00,115 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:00,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:54:00,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-18 19:54:00,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-18 19:54:00,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 19:54:00,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2022-11-18 19:54:00,176 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 25 [2022-11-18 19:54:00,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:00,176 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2022-11-18 19:54:00,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,177 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2022-11-18 19:54:00,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 19:54:00,180 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:00,180 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:00,180 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 19:54:00,181 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:00,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:00,182 INFO L85 PathProgramCache]: Analyzing trace with hash -929835373, now seen corresponding path program 1 times [2022-11-18 19:54:00,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:00,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1654745075] [2022-11-18 19:54:00,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:00,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:00,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:00,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 19:54:00,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:00,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:00,322 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:00,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1654745075] [2022-11-18 19:54:00,322 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1654745075] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:00,323 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:00,323 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 19:54:00,323 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223339779] [2022-11-18 19:54:00,323 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:00,325 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 19:54:00,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:00,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 19:54:00,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:54:00,327 INFO L87 Difference]: Start difference. First operand 78 states and 101 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:00,348 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2022-11-18 19:54:00,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 19:54:00,349 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 19:54:00,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:00,351 INFO L225 Difference]: With dead ends: 122 [2022-11-18 19:54:00,351 INFO L226 Difference]: Without dead ends: 69 [2022-11-18 19:54:00,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 19:54:00,354 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 12 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:00,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 160 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 19:54:00,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-18 19:54:00,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-18 19:54:00,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.3396226415094339) internal successors, (71), 60 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 19:54:00,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions. [2022-11-18 19:54:00,367 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 26 [2022-11-18 19:54:00,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:00,367 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 89 transitions. [2022-11-18 19:54:00,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,368 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions. [2022-11-18 19:54:00,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-18 19:54:00,370 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:00,370 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:00,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 19:54:00,371 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:00,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:00,372 INFO L85 PathProgramCache]: Analyzing trace with hash 1035191503, now seen corresponding path program 1 times [2022-11-18 19:54:00,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:00,372 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1529742398] [2022-11-18 19:54:00,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:00,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:00,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:00,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:00,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:00,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:00,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:00,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1529742398] [2022-11-18 19:54:00,567 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1529742398] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:00,567 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:00,568 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:54:00,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010624028] [2022-11-18 19:54:00,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:00,569 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:54:00,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:00,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:54:00,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:54:00,570 INFO L87 Difference]: Start difference. First operand 69 states and 89 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:00,741 INFO L93 Difference]: Finished difference Result 131 states and 172 transitions. [2022-11-18 19:54:00,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 19:54:00,742 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-18 19:54:00,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:00,744 INFO L225 Difference]: With dead ends: 131 [2022-11-18 19:54:00,744 INFO L226 Difference]: Without dead ends: 69 [2022-11-18 19:54:00,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 19:54:00,747 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 171 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:00,748 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 184 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:54:00,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-18 19:54:00,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-18 19:54:00,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.320754716981132) internal successors, (70), 60 states have internal predecessors, (70), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 19:54:00,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2022-11-18 19:54:00,781 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 30 [2022-11-18 19:54:00,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:00,782 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2022-11-18 19:54:00,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 19:54:00,783 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2022-11-18 19:54:00,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-18 19:54:00,784 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:00,785 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:00,785 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 19:54:00,785 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:00,786 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:00,786 INFO L85 PathProgramCache]: Analyzing trace with hash -2104271006, now seen corresponding path program 1 times [2022-11-18 19:54:00,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:00,787 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1085621276] [2022-11-18 19:54:00,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:00,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:00,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:00,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:00,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 19:54:01,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-18 19:54:01,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:01,048 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:01,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1085621276] [2022-11-18 19:54:01,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1085621276] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:01,049 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:01,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 19:54:01,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744034272] [2022-11-18 19:54:01,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:01,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 19:54:01,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:01,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 19:54:01,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 19:54:01,052 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 19:54:01,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:01,368 INFO L93 Difference]: Finished difference Result 208 states and 266 transitions. [2022-11-18 19:54:01,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:54:01,369 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-11-18 19:54:01,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:01,371 INFO L225 Difference]: With dead ends: 208 [2022-11-18 19:54:01,371 INFO L226 Difference]: Without dead ends: 146 [2022-11-18 19:54:01,372 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-18 19:54:01,374 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 182 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 184 SdHoareTripleChecker+Valid, 288 SdHoareTripleChecker+Invalid, 157 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:01,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [184 Valid, 288 Invalid, 157 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:54:01,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-11-18 19:54:01,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 140. [2022-11-18 19:54:01,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 108 states have (on average 1.2777777777777777) internal successors, (138), 115 states have internal predecessors, (138), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-11-18 19:54:01,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 173 transitions. [2022-11-18 19:54:01,411 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 173 transitions. Word has length 40 [2022-11-18 19:54:01,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:01,412 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 173 transitions. [2022-11-18 19:54:01,412 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 19:54:01,412 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 173 transitions. [2022-11-18 19:54:01,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 19:54:01,414 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:01,414 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:01,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 19:54:01,415 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:01,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:01,416 INFO L85 PathProgramCache]: Analyzing trace with hash 1015544271, now seen corresponding path program 1 times [2022-11-18 19:54:01,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:01,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242656258] [2022-11-18 19:54:01,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:01,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:01,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:01,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 19:54:01,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:01,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:01,637 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:01,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242656258] [2022-11-18 19:54:01,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242656258] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:01,638 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:01,638 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:54:01,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556016022] [2022-11-18 19:54:01,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:01,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:54:01,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:01,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:54:01,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:54:01,647 INFO L87 Difference]: Start difference. First operand 140 states and 173 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:02,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:02,173 INFO L93 Difference]: Finished difference Result 392 states and 507 transitions. [2022-11-18 19:54:02,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-18 19:54:02,175 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-18 19:54:02,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:02,178 INFO L225 Difference]: With dead ends: 392 [2022-11-18 19:54:02,181 INFO L226 Difference]: Without dead ends: 259 [2022-11-18 19:54:02,183 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-11-18 19:54:02,200 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 159 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:02,201 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 376 Invalid, 212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 19:54:02,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-18 19:54:02,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 226. [2022-11-18 19:54:02,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 175 states have (on average 1.28) internal successors, (224), 184 states have internal predecessors, (224), 25 states have call successors, (25), 23 states have call predecessors, (25), 25 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-11-18 19:54:02,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 284 transitions. [2022-11-18 19:54:02,264 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 284 transitions. Word has length 44 [2022-11-18 19:54:02,265 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:02,265 INFO L495 AbstractCegarLoop]: Abstraction has 226 states and 284 transitions. [2022-11-18 19:54:02,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:02,266 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 284 transitions. [2022-11-18 19:54:02,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 19:54:02,268 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:02,269 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:02,269 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 19:54:02,269 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:02,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:02,270 INFO L85 PathProgramCache]: Analyzing trace with hash 796689553, now seen corresponding path program 1 times [2022-11-18 19:54:02,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:02,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906590997] [2022-11-18 19:54:02,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:02,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:02,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:02,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 19:54:02,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:02,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:02,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906590997] [2022-11-18 19:54:02,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906590997] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:02,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:02,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:54:02,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1594169000] [2022-11-18 19:54:02,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:02,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:54:02,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:02,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:54:02,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:54:02,415 INFO L87 Difference]: Start difference. First operand 226 states and 284 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:02,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:02,637 INFO L93 Difference]: Finished difference Result 459 states and 584 transitions. [2022-11-18 19:54:02,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:54:02,638 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-18 19:54:02,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:02,647 INFO L225 Difference]: With dead ends: 459 [2022-11-18 19:54:02,647 INFO L226 Difference]: Without dead ends: 240 [2022-11-18 19:54:02,653 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 19:54:02,656 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 59 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:02,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 355 Invalid, 139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 19:54:02,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-11-18 19:54:02,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 232. [2022-11-18 19:54:02,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 181 states have (on average 1.270718232044199) internal successors, (230), 190 states have internal predecessors, (230), 25 states have call successors, (25), 23 states have call predecessors, (25), 25 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-11-18 19:54:02,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 290 transitions. [2022-11-18 19:54:02,728 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 290 transitions. Word has length 44 [2022-11-18 19:54:02,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:02,728 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 290 transitions. [2022-11-18 19:54:02,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:02,729 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 290 transitions. [2022-11-18 19:54:02,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 19:54:02,731 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:02,731 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:02,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 19:54:02,732 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:02,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:02,733 INFO L85 PathProgramCache]: Analyzing trace with hash -20958897, now seen corresponding path program 1 times [2022-11-18 19:54:02,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:02,733 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404358441] [2022-11-18 19:54:02,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:02,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:02,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:02,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 19:54:02,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:02,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:02,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:02,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404358441] [2022-11-18 19:54:02,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404358441] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:02,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:02,884 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 19:54:02,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1751401742] [2022-11-18 19:54:02,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:02,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 19:54:02,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:02,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 19:54:02,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 19:54:02,886 INFO L87 Difference]: Start difference. First operand 232 states and 290 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:03,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:03,143 INFO L93 Difference]: Finished difference Result 423 states and 534 transitions. [2022-11-18 19:54:03,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:54:03,144 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-18 19:54:03,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:03,151 INFO L225 Difference]: With dead ends: 423 [2022-11-18 19:54:03,151 INFO L226 Difference]: Without dead ends: 198 [2022-11-18 19:54:03,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-11-18 19:54:03,155 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 93 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:03,155 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 303 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:54:03,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2022-11-18 19:54:03,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 193. [2022-11-18 19:54:03,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 150 states have (on average 1.2466666666666666) internal successors, (187), 158 states have internal predecessors, (187), 21 states have call successors, (21), 19 states have call predecessors, (21), 21 states have return successors, (26), 21 states have call predecessors, (26), 21 states have call successors, (26) [2022-11-18 19:54:03,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 234 transitions. [2022-11-18 19:54:03,203 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 234 transitions. Word has length 44 [2022-11-18 19:54:03,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:03,205 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 234 transitions. [2022-11-18 19:54:03,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 19:54:03,206 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 234 transitions. [2022-11-18 19:54:03,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-18 19:54:03,223 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:03,223 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:03,223 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 19:54:03,224 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:03,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:03,226 INFO L85 PathProgramCache]: Analyzing trace with hash -766382886, now seen corresponding path program 1 times [2022-11-18 19:54:03,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:03,227 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590791148] [2022-11-18 19:54:03,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:03,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:03,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:03,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:54:03,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 19:54:03,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:03,438 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:03,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590791148] [2022-11-18 19:54:03,439 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590791148] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:03,439 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:03,439 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 19:54:03,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018543460] [2022-11-18 19:54:03,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:03,440 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 19:54:03,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:03,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 19:54:03,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 19:54:03,441 INFO L87 Difference]: Start difference. First operand 193 states and 234 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:54:03,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:03,677 INFO L93 Difference]: Finished difference Result 382 states and 463 transitions. [2022-11-18 19:54:03,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 19:54:03,678 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-18 19:54:03,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:03,680 INFO L225 Difference]: With dead ends: 382 [2022-11-18 19:54:03,681 INFO L226 Difference]: Without dead ends: 196 [2022-11-18 19:54:03,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-18 19:54:03,685 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 109 mSDsluCounter, 243 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 114 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:03,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [114 Valid, 319 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:54:03,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2022-11-18 19:54:03,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 191. [2022-11-18 19:54:03,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 148 states have (on average 1.2364864864864864) internal successors, (183), 156 states have internal predecessors, (183), 21 states have call successors, (21), 19 states have call predecessors, (21), 21 states have return successors, (26), 21 states have call predecessors, (26), 21 states have call successors, (26) [2022-11-18 19:54:03,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 230 transitions. [2022-11-18 19:54:03,719 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 230 transitions. Word has length 46 [2022-11-18 19:54:03,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:03,721 INFO L495 AbstractCegarLoop]: Abstraction has 191 states and 230 transitions. [2022-11-18 19:54:03,722 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:54:03,722 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 230 transitions. [2022-11-18 19:54:03,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-18 19:54:03,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:03,725 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:03,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 19:54:03,725 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:03,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:03,726 INFO L85 PathProgramCache]: Analyzing trace with hash 390915315, now seen corresponding path program 1 times [2022-11-18 19:54:03,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:03,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1276452190] [2022-11-18 19:54:03,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:03,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:03,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:54:03,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 19:54:03,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-18 19:54:03,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:03,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:03,954 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:03,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1276452190] [2022-11-18 19:54:03,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1276452190] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:03,955 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:03,955 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-18 19:54:03,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1627571465] [2022-11-18 19:54:03,956 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:03,957 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-18 19:54:03,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:03,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-18 19:54:03,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-18 19:54:03,959 INFO L87 Difference]: Start difference. First operand 191 states and 230 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:54:04,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:04,682 INFO L93 Difference]: Finished difference Result 388 states and 468 transitions. [2022-11-18 19:54:04,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-18 19:54:04,683 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-11-18 19:54:04,683 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:04,685 INFO L225 Difference]: With dead ends: 388 [2022-11-18 19:54:04,686 INFO L226 Difference]: Without dead ends: 250 [2022-11-18 19:54:04,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 75 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=128, Invalid=424, Unknown=0, NotChecked=0, Total=552 [2022-11-18 19:54:04,689 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 302 mSDsluCounter, 433 mSDsCounter, 0 mSdLazyCounter, 458 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 532 SdHoareTripleChecker+Invalid, 566 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 458 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:04,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 532 Invalid, 566 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 458 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-18 19:54:04,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 250 states. [2022-11-18 19:54:04,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 250 to 193. [2022-11-18 19:54:04,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 149 states have (on average 1.2147651006711409) internal successors, (181), 158 states have internal predecessors, (181), 21 states have call successors, (21), 19 states have call predecessors, (21), 22 states have return successors, (25), 21 states have call predecessors, (25), 21 states have call successors, (25) [2022-11-18 19:54:04,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 227 transitions. [2022-11-18 19:54:04,719 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 227 transitions. Word has length 48 [2022-11-18 19:54:04,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:04,719 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 227 transitions. [2022-11-18 19:54:04,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 19:54:04,720 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 227 transitions. [2022-11-18 19:54:04,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 19:54:04,721 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:04,721 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:04,721 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 19:54:04,722 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:04,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:04,722 INFO L85 PathProgramCache]: Analyzing trace with hash 126598332, now seen corresponding path program 1 times [2022-11-18 19:54:04,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:04,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [555254891] [2022-11-18 19:54:04,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:04,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:04,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:04,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:54:04,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:04,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 19:54:04,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:04,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:54:04,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:04,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 19:54:04,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:04,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:04,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:04,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [555254891] [2022-11-18 19:54:04,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [555254891] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:04,847 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:04,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 19:54:04,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1267786715] [2022-11-18 19:54:04,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:04,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 19:54:04,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:04,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 19:54:04,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 19:54:04,850 INFO L87 Difference]: Start difference. First operand 193 states and 227 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 19:54:05,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:05,188 INFO L93 Difference]: Finished difference Result 372 states and 443 transitions. [2022-11-18 19:54:05,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 19:54:05,189 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-18 19:54:05,189 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:05,194 INFO L225 Difference]: With dead ends: 372 [2022-11-18 19:54:05,195 INFO L226 Difference]: Without dead ends: 232 [2022-11-18 19:54:05,196 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-18 19:54:05,198 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 136 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:05,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 276 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 19:54:05,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2022-11-18 19:54:05,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 193. [2022-11-18 19:54:05,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 149 states have (on average 1.2080536912751678) internal successors, (180), 158 states have internal predecessors, (180), 21 states have call successors, (21), 19 states have call predecessors, (21), 22 states have return successors, (25), 21 states have call predecessors, (25), 21 states have call successors, (25) [2022-11-18 19:54:05,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 226 transitions. [2022-11-18 19:54:05,233 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 226 transitions. Word has length 50 [2022-11-18 19:54:05,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:05,233 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 226 transitions. [2022-11-18 19:54:05,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 19:54:05,234 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 226 transitions. [2022-11-18 19:54:05,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 19:54:05,237 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:05,237 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:05,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 19:54:05,238 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:05,238 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:05,239 INFO L85 PathProgramCache]: Analyzing trace with hash 41757120, now seen corresponding path program 1 times [2022-11-18 19:54:05,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:05,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205905247] [2022-11-18 19:54:05,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:05,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:05,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:05,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:54:05,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:05,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 19:54:05,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:05,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 19:54:05,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:05,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 19:54:05,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:05,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 19:54:05,383 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:05,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205905247] [2022-11-18 19:54:05,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205905247] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 19:54:05,384 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 19:54:05,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 19:54:05,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302118351] [2022-11-18 19:54:05,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 19:54:05,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 19:54:05,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:05,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 19:54:05,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-18 19:54:05,386 INFO L87 Difference]: Start difference. First operand 193 states and 226 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-18 19:54:06,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:06,018 INFO L93 Difference]: Finished difference Result 472 states and 578 transitions. [2022-11-18 19:54:06,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-18 19:54:06,019 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 50 [2022-11-18 19:54:06,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:06,022 INFO L225 Difference]: With dead ends: 472 [2022-11-18 19:54:06,022 INFO L226 Difference]: Without dead ends: 332 [2022-11-18 19:54:06,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=132, Invalid=330, Unknown=0, NotChecked=0, Total=462 [2022-11-18 19:54:06,024 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 319 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 298 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 408 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 298 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:06,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [324 Valid, 339 Invalid, 408 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 298 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 19:54:06,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 332 states. [2022-11-18 19:54:06,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 332 to 303. [2022-11-18 19:54:06,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 233 states have (on average 1.1974248927038627) internal successors, (279), 247 states have internal predecessors, (279), 36 states have call successors, (36), 29 states have call predecessors, (36), 33 states have return successors, (46), 34 states have call predecessors, (46), 36 states have call successors, (46) [2022-11-18 19:54:06,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 361 transitions. [2022-11-18 19:54:06,065 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 361 transitions. Word has length 50 [2022-11-18 19:54:06,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:06,066 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 361 transitions. [2022-11-18 19:54:06,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-18 19:54:06,066 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 361 transitions. [2022-11-18 19:54:06,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-11-18 19:54:06,068 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 19:54:06,068 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:06,068 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-18 19:54:06,069 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 19:54:06,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 19:54:06,069 INFO L85 PathProgramCache]: Analyzing trace with hash -365727847, now seen corresponding path program 1 times [2022-11-18 19:54:06,069 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 19:54:06,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [107972043] [2022-11-18 19:54:06,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:06,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 19:54:06,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 19:54:06,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 19:54:06,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 19:54:06,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 19:54:06,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-18 19:54:06,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-18 19:54:06,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,342 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 5 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 19:54:06,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 19:54:06,343 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [107972043] [2022-11-18 19:54:06,343 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [107972043] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 19:54:06,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1694186117] [2022-11-18 19:54:06,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 19:54:06,344 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 19:54:06,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 19:54:06,351 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 19:54:06,384 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 19:54:06,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 19:54:06,501 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-18 19:54:06,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 19:54:06,889 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-18 19:54:06,889 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 19:54:07,334 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-18 19:54:07,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1694186117] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 19:54:07,335 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 19:54:07,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 20 [2022-11-18 19:54:07,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282138052] [2022-11-18 19:54:07,336 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 19:54:07,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-18 19:54:07,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 19:54:07,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-18 19:54:07,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=316, Unknown=0, NotChecked=0, Total=380 [2022-11-18 19:54:07,338 INFO L87 Difference]: Start difference. First operand 303 states and 361 transitions. Second operand has 20 states, 20 states have (on average 6.25) internal successors, (125), 14 states have internal predecessors, (125), 6 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 6 states have call successors, (18) [2022-11-18 19:54:09,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 19:54:09,452 INFO L93 Difference]: Finished difference Result 929 states and 1198 transitions. [2022-11-18 19:54:09,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-18 19:54:09,453 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 6.25) internal successors, (125), 14 states have internal predecessors, (125), 6 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 6 states have call successors, (18) Word has length 81 [2022-11-18 19:54:09,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 19:54:09,454 INFO L225 Difference]: With dead ends: 929 [2022-11-18 19:54:09,454 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 19:54:09,459 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 167 SyntacticMatches, 7 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1220 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=1031, Invalid=3525, Unknown=0, NotChecked=0, Total=4556 [2022-11-18 19:54:09,460 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 836 mSDsluCounter, 575 mSDsCounter, 0 mSdLazyCounter, 1027 mSolverCounterSat, 376 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 838 SdHoareTripleChecker+Valid, 639 SdHoareTripleChecker+Invalid, 1403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 376 IncrementalHoareTripleChecker+Valid, 1027 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 19:54:09,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [838 Valid, 639 Invalid, 1403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [376 Valid, 1027 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 19:54:09,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 19:54:09,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 19:54:09,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 19:54:09,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 19:54:09,462 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 81 [2022-11-18 19:54:09,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 19:54:09,463 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 19:54:09,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 6.25) internal successors, (125), 14 states have internal predecessors, (125), 6 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 6 states have call successors, (18) [2022-11-18 19:54:09,463 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 19:54:09,463 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 19:54:09,466 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 19:54:09,475 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-18 19:54:09,672 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-18 19:54:09,675 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 19:54:15,390 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 555 561) no Hoare annotation was computed. [2022-11-18 19:54:15,391 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 555 561) the Hoare annotation is: true [2022-11-18 19:54:15,391 INFO L899 garLoopResultBuilder]: For program point L802-1(lines 798 809) no Hoare annotation was computed. [2022-11-18 19:54:15,392 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 798 809) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~pumpRunning~0)) .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-18 19:54:15,392 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 798 809) no Hoare annotation was computed. [2022-11-18 19:54:15,392 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 810 818) the Hoare annotation is: true [2022-11-18 19:54:15,392 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 810 818) no Hoare annotation was computed. [2022-11-18 19:54:15,393 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 810 818) no Hoare annotation was computed. [2022-11-18 19:54:15,393 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 900) no Hoare annotation was computed. [2022-11-18 19:54:15,393 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 903) no Hoare annotation was computed. [2022-11-18 19:54:15,399 INFO L895 garLoopResultBuilder]: At program point L890-1(lines 875 907) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0))) (let ((.cse21 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0)) (.cse20 (not .cse4))) (let ((.cse10 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1)) (.cse13 (or .cse21 .cse20)) (.cse15 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (<= 1 ~pumpRunning~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse14 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (not .cse21))) (let ((.cse7 (and .cse0 .cse9 .cse11 .cse12 .cse20 .cse14 .cse6)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (and .cse17 .cse18 .cse11 .cse12 .cse20 .cse14 .cse6)) (.cse1 (not .cse12)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (and .cse18 .cse9 .cse11 .cse12 .cse20 .cse19 .cse6)) (.cse3 (and .cse18 .cse9 .cse10 .cse11 .cse12 .cse13 .cse19 .cse15))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse5 .cse6) (or .cse7 .cse1 .cse8 .cse5 (and .cse0 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) .cse16 (and .cse17 .cse18 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15)) (or .cse7 .cse4 .cse1 .cse8 .cse5 .cse16) (or .cse0 (and .cse17 .cse13 .cse19) .cse1 .cse5 .cse2 .cse3)))))) [2022-11-18 19:54:15,400 INFO L899 garLoopResultBuilder]: For program point L535-1(lines 534 553) no Hoare annotation was computed. [2022-11-18 19:54:15,400 INFO L899 garLoopResultBuilder]: For program point L597(lines 597 605) no Hoare annotation was computed. [2022-11-18 19:54:15,401 INFO L895 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse7 (and .cse1 .cse4 .cse2 .cse9 .cse8)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7) (or .cse6 .cse0 .cse7 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2022-11-18 19:54:15,401 INFO L899 garLoopResultBuilder]: For program point L593(lines 593 610) no Hoare annotation was computed. [2022-11-18 19:54:15,401 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-11-18 19:54:15,401 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 531 554) no Hoare annotation was computed. [2022-11-18 19:54:15,401 INFO L899 garLoopResultBuilder]: For program point L870(line 870) no Hoare annotation was computed. [2022-11-18 19:54:15,405 INFO L895 garLoopResultBuilder]: At program point L635(line 635) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,405 INFO L899 garLoopResultBuilder]: For program point L635-1(line 635) no Hoare annotation was computed. [2022-11-18 19:54:15,406 INFO L895 garLoopResultBuilder]: At program point L627(lines 622 629) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,406 INFO L895 garLoopResultBuilder]: At program point L871(lines 866 873) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,407 INFO L895 garLoopResultBuilder]: At program point L603(line 603) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,407 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 904) no Hoare annotation was computed. [2022-11-18 19:54:15,407 INFO L895 garLoopResultBuilder]: At program point L847(lines 842 850) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (or (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0) (not .cse1))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse13 (= 1 ~systemActive~0))) (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse13)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse11 .cse6 .cse7 .cse13 .cse8 .cse12 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse4) (or .cse1 .cse2 .cse5 .cse3) (let ((.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse7 .cse8 .cse9 .cse10) .cse2 .cse5 .cse3)) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse8 .cse12) .cse2 .cse3 .cse4))))) [2022-11-18 19:54:15,408 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-11-18 19:54:15,409 INFO L895 garLoopResultBuilder]: At program point L608-1(lines 589 613) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse7 (and .cse1 .cse4 .cse2 .cse9 .cse8)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7) (or .cse6 .cse0 .cse7 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2022-11-18 19:54:15,409 INFO L895 garLoopResultBuilder]: At program point L637(lines 630 640) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,409 INFO L899 garLoopResultBuilder]: For program point L542-1(lines 542 548) no Hoare annotation was computed. [2022-11-18 19:54:15,410 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 531 554) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-11-18 19:54:15,410 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 531 554) no Hoare annotation was computed. [2022-11-18 19:54:15,410 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 782) no Hoare annotation was computed. [2022-11-18 19:54:15,410 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 870) no Hoare annotation was computed. [2022-11-18 19:54:15,411 INFO L895 garLoopResultBuilder]: At program point L778-2(lines 774 785) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 19:54:15,411 INFO L895 garLoopResultBuilder]: At program point L646(lines 641 649) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or (and (<= 1 ~pumpRunning~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-11-18 19:54:15,411 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-18 19:54:15,412 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-18 19:54:15,412 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-18 19:54:15,412 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-18 19:54:15,412 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-18 19:54:15,412 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-18 19:54:15,413 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-18 19:54:15,413 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-18 19:54:15,413 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-18 19:54:15,413 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-18 19:54:15,414 INFO L895 garLoopResultBuilder]: At program point L762(lines 715 763) the Hoare annotation is: false [2022-11-18 19:54:15,414 INFO L899 garLoopResultBuilder]: For program point L717(lines 716 761) no Hoare annotation was computed. [2022-11-18 19:54:15,414 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 757) no Hoare annotation was computed. [2022-11-18 19:54:15,414 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-18 19:54:15,414 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 19:54:15,415 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 19:54:15,415 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 19:54:15,415 INFO L895 garLoopResultBuilder]: At program point L924(lines 920 926) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 19:54:15,415 INFO L895 garLoopResultBuilder]: At program point L759(lines 716 761) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3))) [2022-11-18 19:54:15,416 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2022-11-18 19:54:15,416 INFO L899 garLoopResultBuilder]: For program point L726-1(lines 726 732) no Hoare annotation was computed. [2022-11-18 19:54:15,416 INFO L899 garLoopResultBuilder]: For program point L718(lines 718 722) no Hoare annotation was computed. [2022-11-18 19:54:15,416 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-18 19:54:15,416 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-18 19:54:15,417 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 19:54:15,417 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-18 19:54:15,417 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-18 19:54:15,417 INFO L899 garLoopResultBuilder]: For program point L752(lines 752 756) no Hoare annotation was computed. [2022-11-18 19:54:15,418 INFO L895 garLoopResultBuilder]: At program point L752-2(lines 746 757) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-18 19:54:15,418 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-11-18 19:54:15,418 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2022-11-18 19:54:15,418 INFO L902 garLoopResultBuilder]: At program point L765(lines 706 769) the Hoare annotation is: true [2022-11-18 19:54:15,418 INFO L895 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3))) [2022-11-18 19:54:15,419 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 19:54:15,419 INFO L895 garLoopResultBuilder]: At program point L939(lines 934 942) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 19:54:15,420 INFO L895 garLoopResultBuilder]: At program point L931(lines 927 933) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 19:54:15,420 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 563 587) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-11-18 19:54:15,420 INFO L899 garLoopResultBuilder]: For program point L855(lines 855 861) no Hoare annotation was computed. [2022-11-18 19:54:15,421 INFO L895 garLoopResultBuilder]: At program point L577(line 577) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) .cse2)) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2)) (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)) .cse1))) [2022-11-18 19:54:15,421 INFO L895 garLoopResultBuilder]: At program point L701(lines 686 704) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 1))) (let ((.cse1 (not .cse7)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse6)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse4 .cse5 .cse7 .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 (and .cse4 .cse5 .cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) .cse0 (not (<= ~waterLevel~0 2)) .cse3)))) [2022-11-18 19:54:15,421 INFO L895 garLoopResultBuilder]: At program point L860(lines 851 864) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse1 (not .cse5)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse6)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5 .cse6))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 .cse0 .cse3 (and .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)))))) [2022-11-18 19:54:15,422 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 563 587) no Hoare annotation was computed. [2022-11-18 19:54:15,422 INFO L899 garLoopResultBuilder]: For program point L571(lines 571 579) no Hoare annotation was computed. [2022-11-18 19:54:15,424 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 584) no Hoare annotation was computed. [2022-11-18 19:54:15,425 INFO L899 garLoopResultBuilder]: For program point L695(lines 695 699) no Hoare annotation was computed. [2022-11-18 19:54:15,425 INFO L899 garLoopResultBuilder]: For program point L695-2(lines 695 699) no Hoare annotation was computed. [2022-11-18 19:54:15,425 INFO L895 garLoopResultBuilder]: At program point L619(lines 614 621) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (and (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) (not (<= ~waterLevel~0 2))) (or .cse2 .cse0 .cse1))) [2022-11-18 19:54:15,426 INFO L895 garLoopResultBuilder]: At program point L582(line 582) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 19:54:15,426 INFO L899 garLoopResultBuilder]: For program point L582-1(lines 563 587) no Hoare annotation was computed. [2022-11-18 19:54:15,426 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 786 797) no Hoare annotation was computed. [2022-11-18 19:54:15,426 INFO L899 garLoopResultBuilder]: For program point L790-1(lines 786 797) no Hoare annotation was computed. [2022-11-18 19:54:15,426 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 786 797) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-18 19:54:15,430 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 19:54:15,433 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 19:54:15,500 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 07:54:15 BoogieIcfgContainer [2022-11-18 19:54:15,507 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 19:54:15,508 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 19:54:15,508 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 19:54:15,508 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 19:54:15,509 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 07:53:59" (3/4) ... [2022-11-18 19:54:15,512 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 19:54:15,521 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 19:54:15,521 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 19:54:15,521 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 19:54:15,521 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 19:54:15,522 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 19:54:15,522 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 19:54:15,522 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 19:54:15,538 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-18 19:54:15,539 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 19:54:15,540 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 19:54:15,540 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 19:54:15,541 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 19:54:15,572 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-18 19:54:15,573 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-18 19:54:15,573 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-11-18 19:54:15,574 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,576 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,578 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel) && !(tmp == 0))) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(tmp == 0))) && ((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel) && !(tmp == 0))) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) [2022-11-18 19:54:15,578 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,579 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) [2022-11-18 19:54:15,579 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,579 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2022-11-18 19:54:15,580 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,580 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || (((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) [2022-11-18 19:54:15,581 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-18 19:54:15,581 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 19:54:15,618 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 19:54:15,618 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 19:54:15,619 INFO L158 Benchmark]: Toolchain (without parser) took 17613.97ms. Allocated memory was 127.9MB in the beginning and 251.7MB in the end (delta: 123.7MB). Free memory was 91.1MB in the beginning and 208.2MB in the end (delta: -117.1MB). Peak memory consumption was 6.6MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,620 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 127.9MB. Free memory was 97.8MB in the beginning and 97.8MB in the end (delta: 28.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 19:54:15,620 INFO L158 Benchmark]: CACSL2BoogieTranslator took 753.68ms. Allocated memory is still 127.9MB. Free memory was 91.1MB in the beginning and 95.8MB in the end (delta: -4.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,620 INFO L158 Benchmark]: Boogie Procedure Inliner took 87.44ms. Allocated memory is still 127.9MB. Free memory was 95.8MB in the beginning and 92.9MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,622 INFO L158 Benchmark]: Boogie Preprocessor took 59.98ms. Allocated memory is still 127.9MB. Free memory was 92.9MB in the beginning and 91.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 19:54:15,622 INFO L158 Benchmark]: RCFGBuilder took 631.83ms. Allocated memory is still 127.9MB. Free memory was 91.6MB in the beginning and 75.2MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,623 INFO L158 Benchmark]: TraceAbstraction took 15958.11ms. Allocated memory was 127.9MB in the beginning and 251.7MB in the end (delta: 123.7MB). Free memory was 74.8MB in the beginning and 214.5MB in the end (delta: -139.7MB). Peak memory consumption was 123.3MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,624 INFO L158 Benchmark]: Witness Printer took 110.74ms. Allocated memory is still 251.7MB. Free memory was 213.5MB in the beginning and 208.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-18 19:54:15,627 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 127.9MB. Free memory was 97.8MB in the beginning and 97.8MB in the end (delta: 28.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 753.68ms. Allocated memory is still 127.9MB. Free memory was 91.1MB in the beginning and 95.8MB in the end (delta: -4.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 87.44ms. Allocated memory is still 127.9MB. Free memory was 95.8MB in the beginning and 92.9MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 59.98ms. Allocated memory is still 127.9MB. Free memory was 92.9MB in the beginning and 91.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 631.83ms. Allocated memory is still 127.9MB. Free memory was 91.6MB in the beginning and 75.2MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15958.11ms. Allocated memory was 127.9MB in the beginning and 251.7MB in the end (delta: 123.7MB). Free memory was 74.8MB in the beginning and 214.5MB in the end (delta: -139.7MB). Peak memory consumption was 123.3MB. Max. memory is 16.1GB. * Witness Printer took 110.74ms. Allocated memory is still 251.7MB. Free memory was 213.5MB in the beginning and 208.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 870]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2412 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2378 mSDsluCounter, 3881 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2885 mSDsCounter, 809 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2745 IncrementalHoareTripleChecker+Invalid, 3554 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 809 mSolverCounterUnsat, 996 mSDtfsCounter, 2745 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 423 GetRequests, 251 SyntacticMatches, 7 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1413 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=303occurred in iteration=11, InterpolantAutomatonStates: 151, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 182 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 1075 PreInvPairs, 1342 NumberOfFragments, 1760 HoareAnnotationTreeSize, 1075 FomulaSimplifications, 198 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 40 FomulaSimplificationsInter, 25382 FormulaSimplificationTreeSizeReductionInter, 5.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 609 NumberOfCodeBlocks, 609 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 676 ConstructedInterpolants, 0 QuantifiedInterpolants, 1370 SizeOfPredicates, 4 NumberOfNonLiveVariables, 295 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 57/78 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel) && !(tmp == 0))) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(tmp == 0))) && ((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel) && !(tmp == 0))) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 <= 1) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 614]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && (tmp == 0 || !(methaneLevelCritical == 0))) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && (tmp == 0 || !(methaneLevelCritical == 0))) && \old(waterLevel) == waterLevel) && \result <= 1)) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || (((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-18 19:54:15,659 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f814cbb-3fd8-4a47-9c8a-e3515b44e4ef/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE